Security Scan Report: jpbannk.myship-711-com-tw-teud5.shop

Redirected to:
https://direct.jp-bank.japanpost.jp/tp1web/U010101WAK.do?link_id=ycDct...
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 8 domains to perform 35 HTTP transactions. The main domain is myship-711-com-tw-teud5.shop and was registered 7 months ago.

Submitted URL: https://jpbannk.myship-711-com-tw-teud5.shop/OYmAvdRJ

Effective URL:
https://direct.jp-bank.japanpost.jp/tp1web/U010101WAK.do?link_id=ycDct...
Redirected

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Landing page is the genuine Japan Post Bank ゆうちょダイレクト login (no credential/payment harvesting, same-origin forms). The entry host jpbannk.myship-711-com-tw-teud5.shop is a deceptive redirector — treat such links as a phishing lure vector and navigate directly to the bank.

Risk Factors (2)
Deceptive entry hostname mimicking Japan Post Bank spelling on an unrelated '.shop' domain with an opaque subdomain string — consistent with a lure/redirector link
Entry domain and final domain are unrelated registrable domains, so the entry host's 23-year age and reputation do not vouch for the final page (and vice versa)
Safety Factors (5)
Final URL is the legitimate Japan Post Bank domain (jp-bank.japanpost.jp) with a standard online-banking endpoint
All form posts and static resources resolve to japanpost.jp subdomains; no credential exfiltration detected
No password, payment or disguised credential fields in the captured DOM
Only third-party script host is userlocal.jp support widget (ranked ~166K), a common Japanese live-chat service
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

ゆうちょダイレクト | ログイン

Scan Type

public

Domain Name Analysis

Within the commerce-oriented generic top-level domain (.shop), 'jpbannk.myship-711-com-tw-teud5.shop' is registered with subdomain 'jpbannk'. Count 23 characters in 'myship-711-com-tw-teud5' holding four vowels versus 11 consonants, along with four digits and four hyphens. Tokenizing the label suggests 8 words: my, ship, 711, com, tw, te, ud, 5. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jpbannk.myship-711-com-tw-teud5.shop/OYmAvdRJ

Page Load Overview

5.35s
Total Load Time
609 KB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:80%
Script:Mixed
Direction:ltr

Detection Details

HTML Lang Attribute:ja
Text Length:2,178 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting97% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

gambling betting
97%
adult content
94%
social media network
92%
finance banking
88%
phishing scam
72%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13195.86.16.208Hong Kong, Hong Kong
AS984OCTOPUS WEB SOLUTION INC
22.17.100.169Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
252.199.95.205Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
218.176.39.41Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
252.199.213.118Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
2203.114.55.134Tokyo, Tokyo, Japan
AS2519ARTERIA Networks Corporation
2203.114.55.133Tokyo, Tokyo, Japan
AS2519ARTERIA Networks Corporation
2124.33.183.201Tokyo, Tokyo, Japan
AS17506ARTERIA Networks Corporation
22.17.100.154Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
254.64.7.4Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
3512--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13DB28529D592A437815211E2BFA7BF6C5802AE1FDF068914B0BCA4173F81EDEED1257C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:NeT5NRuSCm77b7NK9T2QomsbRcbkia7aSayVp8:NeT5bBCmXb09CjAk7V6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24198:ciBFhQE+KkiIGAAfcAINgCbBLVCAAYAICAD2BhgwFhNQJAsXRgPqgQqExF2EAItkEIGlqxgKAs1AiIoDdFTRMBlQL+BAPjBN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dbc3c3c3ffdfdfff
Perceptual Hash:b87c999b9a3c3c30
Difference Hash:3296960618321a18
Wavelet Hash:83c2c2c3c3c3c7cf
Color Hash:#40acbf

Scan History

Scan history not available

Unable to load historical scan data