Scan report · about 2 months agoPublic

santandermx.dothome.co.kr

112.175.185.134AS4766 · KR
Engine tags
Verdict

What happened

Step by step, from what the scanner recorded.
Load 9.9 s · 5 requests
01 · Visitor openssantandermx.dothome.co.kr
02 · Page shown
SuperNet - Banco Santanderstyled as Banco Santander · high
03 · OutcomeCredential phishingA login page wearing a brand it does not own.

Be careful — warning signs found

Automated

It presents itself as Banco Santander while being hosted somewhere Banco Santander does not own. It asks you to enter a password. This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first
SupportingBrand impersonation detected
Banco Santander · high

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteHigh confidence: brand keywords AND a password field — classic credential phishing.

Infrastructure

IP
112.175.185.134KIXS-AS-KR-KR - Korea Telecom, KR · AS4766KR
TLS
CN=GlobalSign GCC R6 AlphaSSL CA 2025, O=GlobalSign nv-sa, C=BE · expires Dec 13, 2026

Hashes & fingerprints

Page capture

Live

Title “SuperNet - Banco Santander” · brand shown: Banco Santander (high)

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
SuperNet - Banco Santander
Load
9.90 s · 5 requests
Stack · 2Apache HTTP ServerPHP