download-bbva.top - phishunt.io

BBVA

https://download-bbva.top Access site

Screenshot

Investigate

Domain download-bbva.top0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 188.114.96.3

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://download-bbva.top

urlscan

Wayback

archive.today

Cert YE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

41 high suspicion likely_phishingheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.5 Brand in title
+4.1 Brand in screenshot
+3.4 Shared IP cluster
+3.2 Young domain
+2.2 Country mismatch
+1.8 ASN reputation
+1.3 Suspicious TLD
+0.9 No registrar lock
+0.7 Brand in cert SAN
+0.6 Final host mismatch
+0.6 Registrar reputation
+0.5 Young certificate
+0.3 Free CA
+0.3 Long domain
+0.1 Hyphens
+0.1 External scripts

25 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Fake BBVA download page on a .top domain with the bank name in the title, page text and certificate. Behind Cloudflare, it shares an IP with other suspicious sites and is flagged by Google Safe Browsing, likely distributing a fake banking app or collecting credentials.

Brand in cert SANGoogle Safe BrowsingBrand in title

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-19 · confidence 80%

Domain & Network

Whois

Registrar Eranet International Limited

Network

IP 188.114.96.3 Cloudflare CDN

Country