Unicaja Banco phishing domains

Newly registered lookalikes - tracked daily

Unicaja Banco phishing domains

Newly registered lookalikes - tracked daily

Website: unicajabanco.es
About: AISpanish retail banking phishing - credential and OTP harvest, frequently SMS-launched, the same pattern as the country's other regional banks.
TLDs: .net (1)
Hosts: Akamai Connected Cloud (1)
Countries: United States (1)

Historical record. phishunt is not tracking any newly-registered Unicaja Banco lookalike domain right now; the 1 entry below is from the 365-day archive (sites taken down, cleaned up, or otherwise inactive). Use them for retrospective analysis, not as a current threat-feed signal.

First seen	URL	IP	Cert	Detail
2026-10-26	`https://unicaja-inicio.net`	172.234.212.139	-	Archived

AIHow to verify a real Unicaja Banco URL

Legitimate Unicaja Banco URLs always end in unicajabanco.es (e.g. www.unicajabanco.es, account.unicajabanco.es). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Unicaja Banco.
The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Unicaja Banco has owned unicajabanco.es for years; brand-new look-alikes are almost never legitimate.
If you got the link from email, SMS, or social media, do not click it. Open unicajabanco.es from your browser bookmark or type the domain manually.
Real Unicaja Banco pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.