Suspicious
Phishings targeting AEAT (Hacienda)
Suspicious and active websites
Phishings targeting Hacienda
Suspicious and active websites
- Countries
United States 
Germany 
Hong Kong
Historical record. phishunt is not tracking any active AEAT (Hacienda) phishing site right now; the 25 entries below are from the 365-day archive (sites taken down, cleaned up, or otherwise inactive). Use them for retrospective analysis, not as a current threat-feed signal.
| First seen | URL | IP | Cert | Detail |
|---|---|---|---|---|
| 2026-08-08 | https://agenciatributariai-com.eu.cc/es |
130.94.15.41 | - | View → |
| 2026-08-08 | https://agenciatributariai-cm.eu.cc/es |
130.94.15.41 | - | View → |
| 2026-07-31 | http://agenciatributariaqazw.eu.cc/es |
43.157.60.125 | - | View → |
| 2026-07-31 | http://agenciatributariaqazd.eu.cc/es |
43.157.60.125 | - | View → |
| 2026-07-30 | http://agenciatributariaoops.eu.cc/es |
43.157.60.125 | - | View → |
| 2026-07-30 | http://agenciatributariaoopd.eu.cc/es |
43.157.60.125 | - | View → |
| 2026-07-30 | http://agenciatributariaoopa.eu.cc/es |
43.157.60.125 | - | View → |
| 2026-07-23 | http://agenciatributariar.cfd/es |
43.166.168.169 | - | View → |
| 2026-07-22 | http://agenciatributaria.chat |
43.129.238.140 | - | View → |
| 2026-07-19 | https://agenciatributaria.work |
101.32.206.159 | - | View → |
| 2026-07-19 | https://agenciatributaria.vip |
43.129.178.115 | - | View → |
| 2026-07-18 | http://agenciatributaria.gob-ar.cc/es |
8.211.42.186 | - | View → |
| 2026-07-17 | https://agenciatributaria-cn.eu.cc/es |
43.130.56.91 | - | View → |
| 2026-07-17 | http://agenciatributaria-wavd.eu.cc/es |
43.157.60.125 | - | View → |
| 2026-07-16 | https://agenciatributaria-sp.top/ldnxxekizt?_eat=valid_20260716071004… |
43.157.72.175 | - | View → |
| 2026-07-10 | http://agenciatributaria-on.eu.cc/es |
43.130.56.91 | - | View → |
| 2026-07-10 | http://agenciatributaria-car.eu.cc/es |
43.130.56.91 | - | View → |
| 2026-07-09 | https://agenciatributaria-dm.eu.cc/es |
43.130.56.91 | - | View → |
| 2026-07-09 | http://agenciatributaria-in.eu.cc/es |
43.130.56.91 | - | View → |
| 2026-07-09 | http://agenciatributaria-auto.eu.cc/es |
43.130.56.91 | - | View → |
| 2026-07-08 | https://agenciatributaria.doiih.cam/es |
43.160.195.61 | - | View → |
| 2026-06-11 | http://agenciatributariaap.eu.cc/es |
170.106.108.129 | - | View → |
| 2026-06-11 | http://agenciatributariamy.eu.cc/es |
104.21.51.131 | WE1 | View → |
| 2026-06-11 | http://agenciatributariaop.eu.cc/es |
188.114.97.3 | WE1 | View → |
| 2026-06-08 | http://agenciatributariat.eu.cc |
188.114.97.3 | WE1 | View → |
AIHow to verify a real AEAT (Hacienda) URL
- Legitimate AEAT (Hacienda) URLs always end in
agenciatributaria.gob.es(e.g.www.agenciatributaria.gob.es,account.agenciatributaria.gob.es). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like.xyz/.top/.vip— is not AEAT (Hacienda). - The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
- If you got the link from email, SMS, or social media, do not click it. Open
agenciatributaria.gob.esfrom your browser bookmark or type the domain manually. - Real AEAT (Hacienda) pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.