ScanMalware.com

Security Scan Report: www.natbank.co.mw

Site favicon
Submitted: Dec 10, 2025, 6:50:03 AMCompleted: Dec 10, 2025, 6:52:10 AMpubliccompleted

Summary

This website contacted 9 IPs in 3 countries across 4 domains to perform 94 HTTP transactions. The main domain is natbank.co.mw.

Submitted URL: https://www.natbank.co.mw/

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Phishing site impersonating National Bank of Malawi; high risk

Risk Factors
Brand impersonation on an unranked, likely typo‑squatted domain
Unranked domain claiming to represent a major financial institution
Lack of legitimate content or functional pages
Domain age information unavailable

Details

Page Title

Welcome to National Bank of Malawi | The bank of the Nation

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(91%)

Domain Information

The domain 'www.natbank.co.mw' uses the .co.mw country-code top-level domain, featuring subdomain 'www'. Count 7 characters in 'natbank' containing two vowels alongside 5 consonants. Segmentation suggests 2 words: nat, bank. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.natbank.co.mw/

Page Load Overview

74.84s
Total Load Time
94
HTTP Requests
4
Domains
21.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-gb
Text Length:6,156 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
91%
corporate business
73%
government public service
70%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14142.250.185.142United States
AS15169GOOGLE
10192.250.239.59London, England, United Kingdom
AS51713WHG Hosting Services Ltd
10216.58.206.72United States
AS15169GOOGLE
10216.239.34.36United States
AS15169GOOGLE
102a00:1450:4001:81c::2008Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
102001:4860:4802:34::36United States
AS15169GOOGLE
102001:4860:4802:32::36United States
AS15169GOOGLE
10216.239.32.36United States
AS15169GOOGLE
102a00:1450:4001:830::200eFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
949--

Page Statistics

94
Requests
7
Unique Domains
21.9 MB
Total Size

Detected Technologies7

X-UA-Compatible
100%
MetaGenerator
100%
Google-Tag-Manager
100%
Google-AnalyticsvUniversal
100%
Joomla!
60%
LiteSpeed
40%
HTTP/3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18F2342319196213B813367D039797F2D74F34AAED7035D91B2FE832A2BCEE50AD5106A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:fdaBBNe6OO6o1dcFmtQjqUlZnu6iuEfya9nP9JBW9GKQQGMsq24T:fdaBBoU6idcFmtmqUlABca9K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:48558:PGUahEGYnGIFQQwQghCwhJZngWIJCEByANAW6CCyCJCELJUroEARgiuUiQQAAsGROiQEWq0ohHJKdAqBMBmCDoIYICwhQBEp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00bf9fff000000ff
Perceptual Hash:bebfd140c1666543
Difference Hash:a5337777a9a1a19e
Wavelet Hash:51bf9fff000000ff
Color Hash:#2d8684

Other Hashes

Crop Resistant:a5337777a9a1a19e,0b0b0b0b0b0b0b0b,2430921012425214,7f5f3f79b97f5f7f,9e1efe92e7f6f63e,09a9a1adafa3a503

Scan History

Scan history not available

Unable to load historical scan data