ingdirect-usuario-login.com

ING España

https://ingdirect-usuario-login.com Access site

Screenshot

Investigate

Domain ingdirect-usuario-login.com1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 172.67.220.200

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://ingdirect-usuario-login.com

urlscan

Wayback

archive.today

Cert WE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

29 low suspicionheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+2.2 Country mismatch
+1.8 ASN reputation
+1.6 Favicon (kit)
+1.4 Registrar reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.8 Young domain
+0.6 Long domain
+0.6 Final host mismatch
+0.5 Young certificate
+0.3 Free CA
+0.2 Hyphens
+0.2 Obfuscated JavaScript
+0.2 Suspicious TLD

21 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Impersonates ING Direct Spain with a user-login lookalike domain behind Cloudflare. Flagged by Google Safe Browsing for social engineering, with a favicon matching known phishing kits and a final-host mismatch, indicating online banking credential theft.

Google Safe BrowsingFavicon (kit)Final host mismatch

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-29 · confidence 85%

Domain & Network

Whois

Registrar NICENIC INTERNATIONAL GROUP CO., LIMITED

Network

IP 172.67.220.200 Cloudflare CDN

Country

United States

Hosting Cloudflare, Inc.

ASN AS13335

TLS Cert WE1

External detection Google Safe Browsing

GSB category: SOCIAL_ENGINEERING

CleanOpenPhish · PhishTank · TweetFeed · urlscan.io

Campaign

Report this phishing

Network / ASN Cloudflare, Inc.

Web form

Submit to blocklists

Google Safe Browsing Microsoft SmartScreen APWG PhishTank

Tracked from 2026-10-28 23:24 UTC · Last refreshed 2026-10-30 17:30 UTC

Phishing detection: ingdirect-usuario-login.com