ScanMalware.com

Security Scan Report: 43mtpauth.postbank.com.mkww.h2977615.stratoserver.net

Redirected to:
https://43mtpauth.postbank.com.mkww.h2977615.stratoserver.net/landing#...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e993925e-9867-4f3e-8dee-082c2ec0f15bDomain and IP registration (RDAP)/api/v1/rdap/e993925e-9867-4f3e-8dee-082c2ec0f15bHow often this domain was scanned/api/v1/domain/stats/43mtpauth.postbank.com.mkww.h2977615.stratoserver.netScan history for this domain/api/v1/domain/history/43mtpauth.postbank.com.mkww.h2977615.stratoserver.net?limit=15
This website contacted 7 IPs in 2 countries across 3 domains to perform 71 HTTP transactions. The main domain is stratoserver.net and was registered 19 years ago.

Submitted URL: https://43mtpauth.postbank.com.mkww.h2977615.stratoserver.net

Effective URL:
https://43mtpauth.postbank.com.mkww.h2977615.stratoserver.net/landing#...
Redirected

The Cisco Umbrella rank of the primary domain is #216,940 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

Hostname deceptively embeds 'postbank.com' under an unrelated shared-hosting domain to look like a bank authentication page; served content is an unrelated Mattermost landing page with no forms. Treat as brand-impersonation infrastructure.

Risk Factors (3)
Deceptive hostname using a third-party bank brand inside a subdomain of an unrelated hosting domain
Auth-suggestive subdomain prefix ('43mtpauth') paired with the bank name
Page content (Mattermost client chooser) is unrelated to the brand in the URL, indicating a misused or compromised host
Safety Factors (4)
Registered parent domain is long-established (2006)
No credential, login or payment form detected in the DOM
No malware, obfuscated JavaScript or network-level indicators detected
Established domain (7265 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Reincarnate Mattermost

Scan Type

public

Domain Name Analysis

The domain name '43mtpauth.postbank.com.mkww.h2977615.stratoserver.net' uses the network infrastructure generic top-level domain (.net) with subdomain '43mtpauth.postbank.com.mkww.h2977615'. Count 12 characters in 'stratoserver' split between 4 vowels and 8 consonants. Segmentation suggests two words: strato, server. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Reincarnate Mattermost a Where would you like to view this? You can view in the desktop app or continue in your web browser. View in Desktop App View in Browser O Remember my preference Don't ha...

Page Load Overview

7.40s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:300 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1181.169.242.140Germany
AS6724Strato GmbH
103.174.46.61Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.70Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
103.174.46.96Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.82Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.110Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
717--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F44E9D1FA2F1C3FAD9353185ED7628CA23E96718DEA4C7A741D1328C5D50CE32AB489

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:bu1SgK+tCiaY3ravdDzfVH8aLm9RjTLUIDc04nKdJTEDZj8V/NjtFHOec2E1d:kt/DmvdDzfytbldJ4WV1Turd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:256208:gYQqM8ecACoA7QQ4EzMhcVmmQwFogWXFBXQBQTMvAIgFUBEISADEGx8SDXGBAA0AjYIASHoEAJIKXWQWMBEUEloLYCTmRuKy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfcf938387dfffff
Perceptual Hash:bc3cc3933ec68c38
Difference Hash:6896b72736300020
Wavelet Hash:008f8181838fcfcf
Color Hash:N/A

Other Hashes

Crop Resistant:6896b72736300020,2848284848585838,6363636362634767

Scan History

Scan history not available

Unable to load historical scan data