Security Scan Report: wwwlpko.terminaid.be

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 3 domains to perform 54 HTTP transactions. The main domain is terminaid.be and was registered 1 year 5 months ago.

Submitted URL: https://wwwlpko.terminaid.be/pin/index.php

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed phishing: a fake iPKO / PKO Bank Polski login page on terminaid.be harvesting customer-number and password credentials, flagged by Google Safe Browsing for social engineering. Do not enter credentials.

Risk Factors (5)
Brand impersonation of PKO Bank Polski / iPKO on a non-official domain
Credential capture form (login + password) on an impersonating host
Google Safe Browsing Social Engineering detection
Deceptive subdomain construction (wwwlpko) imitating a bank hostname
Unranked domain fronting a top-tier financial brand
Domain age information unavailable

Details

Page Title

Strona logowania | iPKO - bankowość elektroniczna PKO Banku Polskiego

Scan Type

public

Domain Name Analysis

Within the Belgian country-code top-level domain (.be), 'wwwlpko.terminaid.be' is registered with subdomain 'wwwlpko'. Count 9 characters in 'terminaid' split between 4 vowels and five consonants. Splitting it apart reveals 3 words: term, in, aid. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

iPKO Zaloguj sie Pobierz darmowg aplikacjg IKO. Obsluguj bank w swoim telefonie. Zobacz wiecej Nie masz konta? | Wpisz numer Klienta lub login Pomoc w logowaniu 22 Zwolnij, by wyprzedzié oszust...

Page Load Overview

1.84s
Total Load Time
404 KB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl
Text Length:1,310 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking51% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1850.6.193.115Ashburn, Virginia, United States
AS31898Oracle Corporation
18193.109.225.100Poland
AS21344Powszechna Kasa Oszczednosci Bank Polski SA
18149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
543--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T131433AA294F41036128794E66DBA5B0E7FB1F257AC0A8E0137AC4BE80FC7D95DC1B64C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:1aRgZljaZjwmqtKyJroaDKFZiahKEX2gdhxd/hjsNTH:Z9DscPEXndfANj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55683:hoxhDIJaAhQKkCWaAoAx54oXw7EADQwIihQ0ikAERAGwCDBgBUBhgQANyREwPoFEQA1CTBLCQQ0ZwhgEMQQoISjJeEEgQ84V

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:04fbc3c3fbffffff
Perceptual Hash:e4669b9b99306666
Difference Hash:3923071623123300
Wavelet Hash:0081c1c381ffd9ff
Color Hash:N/A

Other Hashes

Crop Resistant:3923071623123300

Scan History

Scan history not available

Unable to load historical scan data