Security Scan Report: feb9neejaquagiepokah.mail.santander-serfin.com

Redirected to:
https://www.mcafee.com/de-de/index.html
Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 7 countries across 18 domains to perform 94 HTTP transactions. The main domain is santander-serfin.com and was registered 3 years 9 months ago.

Submitted URL: https://feb9neejaquagiepokah.mail.santander-serfin.com

Effective URL:
https://www.mcafee.com/de-de/index.html
Redirected

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Redirect ends on McAfee's own established domain serving its genuine German product page; no credential or payment harvesting, no malware or IDS evidence. The lone threat-intel tag is a generic abuse-reputation entry on an unrelated third-party resource address and does not reflect this page's content.

Safety Factors (4)
Final destination is the brand owner's own well-known domain (mcafee.com), reached via redirect
No credential-harvesting or payment form; only an email field for a breach-scanning tool
No malware, hunting rule, IDS, obfuscation or exfiltration evidence
Content is consistent with McAfee's genuine German-language product site (products, pricing tiers, support, legal terms)
Domain age information unavailable

Details

Page Title

McAfee | Sicher online mit Antivirus und VPN – Download frei

Scan Type

public

Domain Name Analysis

The domain 'feb9neejaquagiepokah.mail.santander-serfin.com' uses the commercial generic top-level domain (.com) and includes subdomain 'feb9neejaquagiepokah.mail'. Its registrable label 'santander-serfin' stretches across 16 characters with five vowels and 10 consonants, plus one hyphen. Splitting it apart reveals three words: santander, serf, in. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

U McAfee” Produktev Funktionen v Ressourcen v Uber uns v Support v Infozentrum Betrug © (Anmelden. ) 1 MILLIARDE PERSONENBEZOGENE DATENSÄTZE BEI 39 UNTERNEHMEN GESTOHLEN. SCHÜTZEN SIE SICH MIT MCA...

Page Load Overview

1.37s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-DE
Text Length:15,855 chars
Detector Agreement:80%

Website Classification

Primary Category

blog personal website87% confidence
Type: spa
Method: ml+structural

All Detected Categories

blog personal website
87%
technology software
79%
corporate business
75%
phishing scam
73%
news media journalism
53%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6162.4.84.215Australia
AS154653ParkLogic Pty Ltd
4172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
4172.232.7.47Chicago, Illinois, United States
AS63949Akamai Connected Cloud
4173.239.53.32Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
45.79.110.170Netherlands
AS60781LeaseWeb Netherlands B.V.
423.59.40.71Akamai · CDNBallerup Municipality, Capital Region, Denmark
AS16625Akamai Technologies, Inc.
423.36.156.195Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
423.75.64.194Akamai · CDNPrague, Prague, Czech Republic
AS16625Akamai Technologies, Inc.
423.216.154.120Akamai · CDNDublin, Leinster, Ireland
AS20940Akamai International B.V.
423.48.23.56Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
9423--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12115FE5CB0A49368A0BF20F769D105427F5EF7C2DAC991D5B2AE4BA42BD3C66F80F051

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:kXXVXGRGP9fII25eipbVxub7Iluvub7Ilujg7I02iub7Iluj77IcSqub7Ilu2K70:mXVWRK9j/ZSNXCy5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:919341:GBEsblDtQBASAkwd9UCMZqAW0EhM0zUgQgNCExAihMG7GS2CCmSAgAEPmIEAFCRJCNECQgqCEDAnWEGgyoQgBACYMXARIEXA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffff2b2f2f3f1f1
Perceptual Hash:ed92ea93966d05e0
Difference Hash:909a565656420387
Wavelet Hash:fffae282a260e0e1
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data