Suspicious

Phishings targeting Openbank

Suspicious and active websites

Phishings targeting Openbank

Suspicious and active websites

Website
openbank.es
About
AISpanish online-only banking (Santander group). Phishing pages mimic the personal banking login + OTP confirmation flow.
Hosts
Host Europe GmbH (2)
Countries
FranceFrance (2)
TLS certs
YR1 (1) · Sectigo Limited (1)
Historical record. phishunt is not tracking any active Openbank phishing site right now; the 2 entries below are from the 365-day archive (sites taken down, cleaned up, or otherwise inactive). Use them for retrospective analysis, not as a current threat-feed signal.
First seen URL IP Cert Detail
2026-10-23 https://app-openbank.com 37.148.201.157 Sectigo Limited Archived
2026-10-22 https://app-openbank.com/a/ 37.148.201.157 YR1 Archived

AIHow to verify a real Openbank URL

  • Legitimate Openbank URLs always end in openbank.es (e.g. www.openbank.es, account.openbank.es). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Openbank.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open openbank.es from your browser bookmark or type the domain manually.
  • Real Openbank pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.