Is 860u.fundreporting.info a scam?

Our automated security review flags 860u.fundreporting.info as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is 860u.fundreporting.info safe to use?

No — 860u.fundreporting.info scored 11/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does 860u.fundreporting.info have a valid SSL certificate?

Yes. 860u.fundreporting.info presents a valid TLSv1.3 certificate issued by DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1, expiring in 82 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has 860u.fundreporting.info been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report 860u.fundreporting.info as clean.

Is 860u.fundreporting.info on any phishing or malware blacklists?

No. 860u.fundreporting.info is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is 860u.fundreporting.info hosted?

860u.fundreporting.info resolves to an IP operated by Hostserver GmbH in DE (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the 860u.fundreporting.info report updated?

This is a permanent record of the scan run on June 22, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around 860u.fundreporting.info have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is 860u.fundreporting.info legit or a scam?

Our verdict:Dangerous· 11/100

SafeSuspiciousDangerous

A malicious BNP Paribas clone site using a fund-reporting subdomain to harvest banking credentials through a fake Single Sign-On portal.

Top reasons

Impersonates BNP Paribas branding on an unofficial domain Contains a credential-harvesting login form Confirmed clone of legitimate banking infrastructure

860u.fundreporting.infoScanned 1h ago

Post Facebook

Trust score

DANGEROUS

Heuristics 8·MT 12

Category tags

phishing#phishing#clone site90% MT confidence

Technical red flags (2)

Impersonates BNP ParibasCredential-harvest pattern

Warning signals (2)

Redirects to another domain Scam-network signals (35/100)

Positive signals (4)

Antivirus clear Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

—

Registration date unknown

MT Intelligence

Dangerous

Critical likelihood · 90% confidence

DANGEROUS

Phishing site — do not log in

A BNP Paribas login is shown on an unrelated domain — classic credential-harvest pattern. This page looks designed to steal credentials. Don't log in — and if you already did, change the password anywhere you reused it and turn on two-factor authentication.

Website Preview

LIVE RENDER

860u.fundreporting.info

1Impersonates BNP Paribas 2Login form detected — credential-harvest pattern

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Critical scam likelihoodengineMT · Guardiantrust12/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

The page explicitly impersonates BNP Paribas branding and its 'PRIIPS Single Sign-On' system on a domain not owned by the bank. Our fingerprinting confirms the site is a clone of the legitimate BNP Paribas infrastructure. While the parent domain is sometimes used for financial documents, this specific subdomain and login path are not referenced in any official bank documentation. The presence of a login form on an unofficial domain is a classic credential-harvesting pattern. No legitimate business registration or ownership data exists for this specific operator.

Full dossier

Analysis complete

Page Content

The site features a 'BNP PRIIPS Single Sign-On' interface with fields for email and options for 'LPA Entra ID' or 'BNP Paribas' login. The branding is copied directly from official bank portals to create a false sense of security.

Infrastructure

The site is hosted on a subdomain of fundreporting.info, a domain often used for hosting regulatory documents but here repurposed for a phishing landing page. It uses a valid SSL certificate to appear secure, though the traffic is not indexed globally.

Domain History

WHOIS data for this specific subdomain is unavailable, and it lacks any public reputation history. The 4-hop redirect chain and cross-domain loading are typical of obfuscated phishing setups.

Web Reputation

Our antivirus network and malware engines currently show no flags, which is common for newly deployed phishing links. However, the lack of any official connection to the bank's verified domains makes it highly dangerous.

Risk Factors

Impersonates BNP Paribas branding on an unofficial domain
Contains a credential-harvesting login form
Confirmed clone of legitimate banking infrastructure
No public business registration or ownership records found
Uses a specific subdomain not documented by the impersonated brand
Redirects through multiple hops to reach the final landing page

Positive Signals

Valid SSL certificate from a recognized issuer
Clean results from our current antivirus engine scans

AI Recommendation

Do not enter your email, password, or any banking credentials on this page. If you have already done so, change your BNP Paribas password immediately and contact the bank's fraud department.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for 860u.fundreporting.info, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Clones bnpparibas.com

The page impersonates a well-known brand's site.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

No scam reports found

No complaints, no negative coverage turned up in our sweep.

Key findings

6 headline facts from open-web research

Domain 860u.fundreporting.info hosts a login page titled "Sign in to BNP PRIIPS Single Sign-On" with email field and options for "LPA Entra ID Sign-On" and "BNP Paribas Single Sign-On" (absolute links resolve to paths on 860u.fundreporting.
fundreporting.info is widely used in legitimate PRIIPs Key Information Documents (KIDs) by asset managers (e.g., rbcbluebay.fundreporting.info, op.fundreporting.info, bbva.fundreporting.info, bantleon-invest-ag.fundreporting.info) for perfo
No search results for "860u.fundreporting.info" outside the scanned page; no mentions of scam, phishing, fraud, or complaints found.
Legitimate BNP Paribas client portals include ssologin.bnpparibas.com/cib/LoginForm.aspx, securities.cib.bnpparibas, and centric.bnpparibas.com; no official reference to fundreporting.info or 860u subdomain.
The specific subdomain "860u" and "assetmanager-860" realm appear unique to this login page and are not referenced in any public BNP Paribas documentation or fund reports.
Page content directly references BNP Paribas branding in a sign-on context, consistent with the provided brand reference of impersonation/clone attempt.

Impersonation / typosquat

Clone of bnpparibas.com

Page title and options impersonate BNP Paribas SSO for 'BNP PRIIPS'; uses subdomains like 860u.fundreporting.info and links to /realms/assetmanager-860 with 'BNP Paribas Single Sign-On' option; legitimate BNP Paribas uses ssologin.bnpparibas.com, centric.bnpparibas.com, and securities.cib.bnpparibas

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research into 860u.fundreporting.info found no public scam reports or consumer complaints. While the parent domain is used by various asset managers for regulatory 'KID' documents, there is no evidence that BNP Paribas uses this specific '860u' subdomain for its official Single Sign-On services. Legitimate BNP Paribas portals are hosted on verified bank domains, and this site appears to be a standalone clone designed for data collection.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score

0/100

ClearLowModerateHighCritical

Evidence (1)

Evidence confirms this site is a clone of bnpparibas.com.

Linked signals (1)

Clone of bnpparibas.com

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious58Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.
Page impersonates BNP Paribas on a non-official domain.
Login form present on a page impersonating BNP Paribas — credential-harvest pattern.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerDigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1

ExpiresSep 12, 2026 (82d)

Self-signedNo

Hosting & Technology

HostingHostserver GmbH

Server locationDE

Web serverApache

Redirect Chain

Hops

Cross-domain

Yes

Lookalike

Punycode

1301http://860u.fundreporting.info/
2302https://860u.fundreporting.info/
3302https://860u.fundreporting.info/AREP
4302https://860u.fundreporting.info/oauth2/start?rd=%2FAREP
5200https://idpi.l-p-a.info/realms/assetmanager-860/protocol/openid-connect/auth?approval_prompt=force&client_id=dashboard&code_challenge=V7lnVlznPZW6SECR_qFi5Irp37uvf59gY9fmDZOD1QQ&code_challenge_method=S256&redirect_uri=https%3A%2F%2F860u.fundreporting.info%2Foauth2%2Fcallback&response_type=code&scope=openid+profile+email&state=e7BisfU6SdJgP8gD7IDpgUjfLD_5VPF0KPh0X38fJgk%3A%2FAREPcross-domain

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPHostserver GmbH

Usage typeData Center/Web Hosting/Transit

Scam-Type Likelihood

2 scam-type patterns detected

Scam-Type Likelihood

2 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Phishing

Phishing

High likelihood

85/100

Login form combined with brand impersonation (credential-harvest pattern).
Page impersonates BNP Paribas in a login flow.
AI analyst tagged this as phishing / data-harvesting.

Brand Impersonation

High likelihood

75/100

Page claims to be BNP Paribas.
AI analyst tagged this as a brand / clone-site impersonation.
Clustered with known brand-impersonation infrastructure.

Scam-Type Likelihood

2 of 13 categories showed signals

Top match: Phishing

Phishing

High likelihood

85/100

Login form combined with brand impersonation (credential-harvest pattern).
Page impersonates BNP Paribas in a login flow.
AI analyst tagged this as phishing / data-harvesting.

Brand Impersonation

High likelihood

75/100

Page claims to be BNP Paribas.
AI analyst tagged this as a brand / clone-site impersonation.
Clustered with known brand-impersonation infrastructure.

Phishing site — act fast

This page shows signs of attempting to steal credentials or impersonate a trusted brand.

Do not interact with 860u.fundreporting.info
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
If you already typed your password — change it now
Change the password on the legitimate site and anywhere else you re-used it. Turn on two-factor authentication. Review recent account activity.
Report the phishing URL
APWG (Anti-Phishing Working Group) accepts phishing reports at reportphishing@apwg.org. Google Safe Browsing reports help protect other users.
Open
Get help on the forum
MalwareTips members can help you assess damage and next steps.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

idpi.l-p-a.info

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review flags 860u.fundreporting.info as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
No — 860u.fundreporting.info scored 11/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
Yes. 860u.fundreporting.info presents a valid TLSv1.3 certificate issued by DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1, expiring in 82 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
No. All 92 antivirus engines in our malware network report 860u.fundreporting.info as clean.
No. 860u.fundreporting.info is not currently listed on the major browser blocklist feeds that modern browsers use.
860u.fundreporting.info resolves to an IP operated by Hostserver GmbH in DE (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 22, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around 860u.fundreporting.info have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·860u.fundreporting.info

DANGEROUS

This is a phishing page designed to steal BNP Paribas login credentials. It uses a deceptive subdomain to mimic a legitimate financial reporting service while hosting an unauthorized sign-in form.

Do not enter your email, password, or any banking credentials on this page. If you have already done so, change your BNP Paribas password immediately and contact the bank's fraud department.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

alkaleanweightlossreviews.blogspot.com

2h ago

Read the review

Dangeroustrust9

dancing-froyo-1eba9c.netlify.app

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.