Phishing detection: ingdirect-ingreso-usuarios.com
ING España Screenshot
Investigate
Domain
ingdirect-ingreso-usuarios.com0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
172.67.206.26
ipinfo
Greynoise
URL
https://ingdirect-ingreso-usuarios.com
Phishunt analysis Beta
31
medium suspicion suspiciousheuristic risk score · not a probability
Keyword matchLong domainHigh entropy
17 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Impersonates ING Direct Spain's user login portal to steal banking credentials. Registered only 3 days before detection, hosted in the US via Cloudflare, and flagged as social engineering by Google Safe Browsing. Part of a coordinated multi-domain phishing campaign.
Google Safe BrowsingYoung domainCountry mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-22 · confidence 87%
Domain & Network
Whois
Registrar
NICENIC INTERNATIONAL GROUP CO., LIMITED
Network
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
-
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists