Phishing detection: intesa.banca-rs.com

Intesa San Paolo
http://intesa.banca-rs.com Access site
Screenshot
Screenshot of intesa.banca-rs.com
Investigate
Domain intesa.banca-rs.com1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 45.74.61.10
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://intesa.banca-rs.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
23 low suspicionheuristic risk score · not a probability
Keyword matchBrand in subdomainTweetFeed
15 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Freshly registered domain (0 days old) impersonating Intesa Sanpaolo via a branded subdomain hosted at 69HOST LLC in Germany. Flagged by TweetFeed. The minimal domain status and immediate deployment are consistent with a targeted Italian banking credential harvesting campaign.

Young domainTweetFeedBrand in subdomain
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-28 · confidence 80%
Domain & Network
Whois
Registrar Fewmoretaps OU d/b/a Trustname.com
Network
IP 45.74.61.10
Country GermanyGermany
Hosting 69HOST LLC
ASN AS205397
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io · SANS ISC
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-28 01:02 UTC  ·  Last refreshed 2026-08-04 19:30 UTC