New Registrations

Movistar phishing domains

Newly registered lookalikes - tracked daily


Movistar phishing domains

Newly registered lookalikes - tracked daily


Tracked (7d)
8
New (24h)
4
vs avg
About
AISpanish telecom lure (Telefónica). Fake 'pending bill' or 'subscription suspended' notifications harvesting card data.
TLDs
.site (3) · .shop (2) · .bar (1)
Countries
United StatesUnited States (4) · CyprusCyprus (2)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) URL Screenshot Flags Details
2026-08-09 02:23 2026-08-09 02:23
https://movistar.bar
Screenshot of movistar.bar Details
2026-08-09 02:22 2026-08-09 02:22
https://movist4r-pagos.site
Screenshot of movist4r-pagos.site Details
2026-08-08 02:40 2026-08-08 02:40
https://ofertar-movistar.site
Screenshot of ofertar-movistar.site Details
2026-08-08 02:36 2026-08-08 02:36
https://movistar-es.xyz
Screenshot of movistar-es.xyz Details
2026-08-06 02:05 2026-08-06 02:05
https://movistar.store
Screenshot of movistar.store Details
2026-08-04 01:21 2026-08-04 01:21
https://portate-movistar.shop
Screenshot of portate-movistar.shop Details
2026-08-04 01:03 2026-08-04 01:03
https://movistar-online.shop
Screenshot of movistar-online.shop Details
2026-08-02 02:06 2026-08-02 02:06
https://renueva-movistar.site
Screenshot of renueva-movistar.site Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://movistar.bar
Screenshot of movistar.bar Details
https://movist4r-pagos.site
Screenshot of movist4r-pagos.site Details
https://ofertar-movistar.site
Screenshot of ofertar-movistar.site Details
https://movistar-es.xyz
Screenshot of movistar-es.xyz Details
https://movistar.store
Screenshot of movistar.store Details
https://portate-movistar.shop
Screenshot of portate-movistar.shop Details
https://movistar-online.shop
Screenshot of movistar-online.shop Details
https://renueva-movistar.site
Screenshot of renueva-movistar.site Details

AIHow to verify a real Movistar URL

  • Legitimate Movistar URLs always end in movistar.es (e.g. www.movistar.es, account.movistar.es). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Movistar.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Movistar has owned movistar.es for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open movistar.es from your browser bookmark or type the domain manually.
  • Real Movistar pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.