Phishing detection: agenciatributariar.cfd

AEAT (Hacienda)
http://agenciatributariar.cfd/es Access site
Screenshot
Screenshot of agenciatributariar.cfd
Investigate
Domain agenciatributariar.cfd0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 43.166.168.169
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://agenciatributariar.cfd/es
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
28 low suspicionheuristic risk score · not a probability
Keyword matchBrand impersonation in pathurlscan.io
17 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Impersonation of the Spanish Tax Agency (Agencia Tributaria) on a 2-day-old .cfd domain hosted on Tencent infrastructure in the US. Flagged by both OpenPhish and urlscan, targeting Spanish taxpayers to harvest government portal credentials.

Young domainOpenPhishBrand impersonation in path
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 89%
Domain & Network
Whois
Registrar Aceville Pte. Ltd.
Network
IP 43.166.168.169
Country United StatesUnited States
Hosting Tencent Building, Kejizhongyi Avenue
ASN AS132203
TLS Cert -
External detection OpenPhish urlscan.io
CleanGoogle Safe Browsing · PhishTank · TweetFeed
Report this phishing
Network / ASN Tencent Building, Kejizhongyi Avenue
tencent_noc@tencent.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-23 13:02 UTC  ·  Last refreshed 2026-07-23 19:30 UTC