New Registrations

Banco Santander phishing domains

Newly registered lookalikes - tracked daily


Banco Santander phishing domains

Newly registered lookalikes - tracked daily


Tracked (7d)
16
New (24h)
2
vs avg
About
AIRetail banking phishing concentrated in Spain, UK, Latin America. Mimics the personal banking login and OTP confirmation flow.
TLDs
.com (11) · .online (1) · .vip (1)
Countries
United StatesUnited States (11) · GermanyGermany (1) · CzechiaCzechia (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) URL Screenshot Flags Details
2026-08-06 02:22 2026-08-06 02:22
https://santandermexico.online
Screenshot of santandermexico.online Details
2026-08-06 02:02 2026-08-06 02:02
https://login-santanderkey.com
Screenshot of login-santanderkey.com GSB Details
2026-08-05 01:55 2026-08-05 01:55
https://santanderhome.com
Screenshot of santanderhome.com Details
2026-08-04 01:25 2026-08-04 01:25
https://us-santander.com
Screenshot of us-santander.com Details
2026-08-04 01:21 2026-08-04 01:21
https://santanderfunds.com
Screenshot of santanderfunds.com Details
2026-08-04 01:21 2026-08-04 01:21
https://santander.vip
Screenshot of santander.vip Details
2026-08-02 01:13 2026-08-02 01:13
https://configurar-santanderkey.com
Screenshot of configurar-santanderkey.com Details
2026-08-01 02:53 2026-08-01 02:53
https://verifica-santanderes.com
Screenshot of verifica-santanderes.com Details
2026-08-01 02:43 2026-08-01 02:43
https://servicios-santander.com
Screenshot of servicios-santander.com Details
2026-08-01 02:38 2026-08-01 02:38
https://santanderkey-activar.com
Screenshot of santanderkey-activar.com GSB Details
2026-08-01 02:37 2026-08-01 02:37
https://santanderinvest.net
Screenshot of santanderinvest.net Details
2026-08-01 02:37 2026-08-01 02:37
https://santanderempresasclientes.live
Screenshot of santanderempresasclientes.live Details
2026-08-01 02:37 2026-08-01 02:37
https://santander-protocolo.com
Screenshot of santander-protocolo.com OpenPhish Details
2026-08-01 01:05 2026-08-01 01:05
https://aviso-santanderkey.com
Screenshot of aviso-santanderkey.com GSB Details
2026-08-01 00:57 2026-08-01 00:57
https://activacion-santanderkey.com
Screenshot of activacion-santanderkey.com GSB Details
2026-07-31 02:07 2026-07-31 02:07
https://santanderpt.help
Screenshot of santanderpt.help Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://santandermexico.online
Screenshot of santandermexico.online Details
https://login-santanderkey.com
GSB
Screenshot of login-santanderkey.com Details
https://santanderhome.com
Screenshot of santanderhome.com Details
https://us-santander.com
Screenshot of us-santander.com Details
https://santanderfunds.com
Screenshot of santanderfunds.com Details
https://santander.vip
Screenshot of santander.vip Details
https://configurar-santanderk…
Screenshot of configurar-santanderkey.com Details
https://verifica-santanderes.…
Screenshot of verifica-santanderes.com Details
https://servicios-santander.c…
Screenshot of servicios-santander.com Details
https://santanderkey-activar.…
GSB
Screenshot of santanderkey-activar.com Details
https://santanderinvest.net
Screenshot of santanderinvest.net Details
https://santanderempresasclie…
Screenshot of santanderempresasclientes.live Details
https://santander-protocolo.c…
OpenPhish
Screenshot of santander-protocolo.com Details
https://aviso-santanderkey.com
GSB
Screenshot of aviso-santanderkey.com Details
https://activacion-santanderk…
GSB
Screenshot of activacion-santanderkey.com Details
https://santanderpt.help
Screenshot of santanderpt.help Details

AIHow to verify a real Banco Santander URL

  • Legitimate Banco Santander URLs always end in bancosantander.es (e.g. www.bancosantander.es, account.bancosantander.es). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Banco Santander.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Banco Santander has owned bancosantander.es for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open bancosantander.es from your browser bookmark or type the domain manually.
  • Real Banco Santander pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.