Security Scan Report: benef.scotiabanknpe.com.pe

Redirected to:
https://benef.scotiabanknpe.com.pe/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 47 IPs in 4 countries across 33 domains to perform 164 HTTP transactions. The main domain is scotiabanknpe.com.pe.

Submitted URL: http://benef.scotiabanknpe.com.pe/

Effective URL:
https://benef.scotiabanknpe.com.pe/login
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Look-alike Scotiabank domain hosting a password-only 'Banca por Internet' login — a credential-phishing page impersonating the Peruvian bank. Do not enter any credentials.

Risk Factors (5)
Brand impersonation of Scotiabank on a non-official look-alike domain
Credential-harvesting login form (2 password fields, no username field) on an impersonating domain
Deceptive hostname using the bank's name with an extra label ('scotiabanknpe')
Cloned corporate footer/legal text to mimic the legitimate bank portal
Page loads scripts from an unrelated CloudFront host
Domain age information unavailable

Details

Page Title

Scotiabank - Banca por Internet

Scan Type

public

Domain Name Analysis

You're looking at domain 'benef.scotiabanknpe.com.pe' on the Peruvian country-code top-level domain (.com.pe) with subdomain 'benef'. The core label 'scotiabanknpe' covers 13 characters containing 5 vowels alongside eight consonants. Word splitting yields three words: scotiabank, n, pe. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://benef.scotiabanknpe.com.pe/

Page Load Overview

2.77s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:783 chars
Detector Agreement:75%

Website Classification

Primary Category

finance banking47% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2623.36.162.216Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
318.245.45.39Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
323.36.162.196Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
318.245.45.132Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
318.245.45.106Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
318.245.45.190Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3142.251.20.97Google · CDNUnited States
AS15169Google LLC
32.23.245.90Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
3146.75.121.230Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
16447--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BD248EDA7EC0B066136B0EC1513F252BB42A3525251DD860F37DE6E937A4FCAC12AD2D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:PcEa+DSiBn01p84GQd1mhJPaWqDXHMZb5dfEZlk2Cp6T1/lw74:PcElD9nGEQL8JPagzgk2CqSs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:225089:zqHUASwh2gI4YOMhAIiEAMbSQLIVBAUAAWCKQgSAIOQAIzQChMKSwJKCDQIYMCagGGNIchUzKN8LKQBaUpREdIjGaggQAUGM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ef4fefe7eefcfcfd
Perceptual Hash:d2a1a856ad4ad6ad
Difference Hash:98d8d8de58540909
Wavelet Hash:f04040c0a030f0fc
Color Hash:07230000000

Other Hashes

Crop Resistant:98d8d8de58540909

Scan History

Scan history not available

Unable to load historical scan data