New Registrations

Movistar phishing domains

Newly registered lookalikes - tracked daily


Movistar phishing domains

Newly registered lookalikes - tracked daily


Tracked (7d)
14
New (24h)
4
vs avg
About
AISpanish telecom lure (Telefónica). Fake 'pending bill' or 'subscription suspended' notifications harvesting card data.
TLDs
.top (6) · .shop (5) · .com (2)
Countries
United StatesUnited States (13) · GermanyGermany (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) URL Screenshot Flags Details
2026-07-20 01:53 2026-07-20 01:53
https://movistarz.shop
Screenshot of movistarz.shop Details
2026-07-20 01:53 2026-07-20 01:53
https://movistarr.top
Screenshot of movistarr.top Details
2026-07-19 02:06 2026-07-19 02:06
https://movistarpagofactura.net
Screenshot of movistarpagofactura.net Details
2026-07-19 02:06 2026-07-19 02:06
https://movistari.top
Screenshot of movistari.top Details
2026-07-18 02:27 2026-07-18 02:27
https://movistarl.top
Screenshot of movistarl.top Details
2026-07-17 02:55 2026-07-17 02:55
https://movistartayuda.com
Screenshot of movistartayuda.com Details
2026-07-17 02:55 2026-07-17 02:55
https://movistarr.com
Screenshot of movistarr.com Details
2026-07-17 02:55 2026-07-17 02:55
https://movistaro.top
Screenshot of movistaro.top Details
2026-07-17 02:55 2026-07-17 02:55
https://movistarl.shop
Screenshot of movistarl.shop Details
2026-07-17 02:55 2026-07-17 02:55
https://movistare.top
Screenshot of movistare.top Details
2026-07-17 02:55 2026-07-17 02:55
https://movistar.top
Screenshot of movistar.top Details
2026-07-16 01:45 2026-07-16 01:45
https://movistarr.shop
Screenshot of movistarr.shop Details
2026-07-16 01:45 2026-07-16 01:45
https://movistaro.shop
Screenshot of movistaro.shop Details
2026-07-16 01:45 2026-07-16 01:45
https://movistare.shop
Screenshot of movistare.shop Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://movistarz.shop
Screenshot of movistarz.shop Details
https://movistarr.top
Screenshot of movistarr.top Details
https://movistarpagofactura.n…
Screenshot of movistarpagofactura.net Details
https://movistari.top
Screenshot of movistari.top Details
https://movistarl.top
Screenshot of movistarl.top Details
https://movistartayuda.com
Screenshot of movistartayuda.com Details
https://movistarr.com
Screenshot of movistarr.com Details
https://movistaro.top
Screenshot of movistaro.top Details
https://movistarl.shop
Screenshot of movistarl.shop Details
https://movistare.top
Screenshot of movistare.top Details
https://movistar.top
Screenshot of movistar.top Details
https://movistarr.shop
Screenshot of movistarr.shop Details
https://movistaro.shop
Screenshot of movistaro.shop Details
https://movistare.shop
Screenshot of movistare.shop Details

AIHow to verify a real Movistar URL

  • Legitimate Movistar URLs always end in movistar.es (e.g. www.movistar.es, account.movistar.es). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Movistar.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Movistar has owned movistar.es for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open movistar.es from your browser bookmark or type the domain manually.
  • Real Movistar pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.