Security Scan Report: scotiabank-mobile-banking.feli.games

Redirected to:
https://www.mcafee.com/de-de/index.html
Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 5 countries across 15 domains to perform 92 HTTP transactions. The main domain is feli.games and was registered 9 years ago.

Submitted URL: http://scotiabank-mobile-banking.feli.games/

Effective URL:
https://www.mcafee.com/de-de/index.html
Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

4
Risk Score

Deceptive Scotiabank-like entry hostname on a ParkLogic parking domain that redirects to the genuine McAfee site; the rendered page is McAfee's own official content with no credential, payment or malware signal. Suspicious lure URL, benign destination.

Risk Factors (2)
Deceptive entry hostname: the 'scotiabank-mobile-banking' subdomain of feli.games is crafted to resemble a bank login URL, the classic shape of an SMS/email lure, even though it resolved to a parking interstitial rather than bank content.
Entry host is a ParkLogic parking/monetisation domain that monetises traffic by auto-redirecting visitors to unrelated third-party sponsors — an unpredictable and opaque off-site funnel.
Safety Factors (4)
Final destination is the genuine McAfee site on its own established domain, so the page served is first-party brand content, not impersonation.
No credential or payment form on the rendered page; only a non-sensitive email-scan field.
No malware, YARA, IDS, kit-roster or JavaScript-exfiltration findings.
Cross-origin form submission classified as a legitimate SSO flow, not exfiltration.
Domain age information unavailable

Details

Page Title

McAfee | Sicher online mit Antivirus und VPN – Download frei

Scan Type

public

Domain Name Analysis

You're looking at domain 'scotiabank-mobile-banking.feli.games' on the .games top-level domain and includes subdomain 'scotiabank-mobile-banking'. The second-level label 'feli' is 4 characters long with 2 vowels and 2 consonants. Segmentation suggests two words: f, eli. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://scotiabank-mobile-banking.feli.games/

Page Load Overview

0.13s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-DE
Text Length:15,896 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate business88% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
88%
blog personal website
79%
technology software
75%
phishing scam
49%
documentation technical
37%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7162.4.84.240Australia
AS154653ParkLogic Pty Ltd
5172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
5172.232.7.47Chicago, Illinois, United States
AS63949Akamai Connected Cloud
5173.239.53.32Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
55.79.110.170Netherlands
AS60781LeaseWeb Netherlands B.V.
523.45.110.85Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
5104.101.248.42Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS16625Akamai Technologies, Inc.
523.36.156.195Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
523.52.180.163Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
52.16.10.141Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
9218--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7150E5CB0A49368A0BF20F769D105427F5EF7C2DAC991D5B2AE4BA42BD3C66F80F051

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:k9rVXcRGz94IIJ1eipbVxub7Iluvub7Ilujg7I02iub7Iluj77IcSqub7Ilu2K7o:8rVsR49J/ZSNXCyr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:919917:SOogJARiCpRIILLGR6AQgKmqkAAADSkQIBDhKkhGjTDiIi2EqEiGG4OEFChCgACUIEECAkxykxGMYVgA1AwomUQkD4dRoQAz

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffffbf3b3f0e0e0
Perceptual Hash:e49ad3a52eb813c6
Difference Hash:90c3474767460606
Wavelet Hash:fffbf12120e0e0e0
Color Hash:#4082bf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data