Phishing detection: tottattoo.com

Banco Santander
https://tottattoo.com Access site
Screenshot
Screenshot of tottattoo.com
Investigate
Domain tottattoo.com2 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 38.4.92.231
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://tottattoo.com
urlscan Wayback archive.today
Cert YE1
crt.sh Censys Google CT
Phishunt analysis Beta
16 noiseheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +3.2 Young domain
  • +2.2 Country mismatch
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +0.9 No registrar lock
  • +0.7 Unrecognised DNS provider
  • +0.6 Registrar reputation
  • +0.5 Young certificate
  • +0.3 Free CA
  • +0.3 Long domain
  • +0.2 Suspicious TLD
14 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site is flagged for potential Santander bank association based on outbound link patterns and keyword signals, hosted on a low-reputation network with a bulletproof nameserver indicator. No direct brand elements were confirmed; confidence in brand attribution is low.

No brand linksKeyword matchCountry mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-14 · confidence 22%
Domain & Network
Whois
Registrar Gransy, s.r.o.
Network
IP 38.4.92.231
Country United StatesUnited States
Hosting Zillion Network Inc.
ASN AS54801
TLS Cert YE1
External detection No external source flags this
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-09-13 23:27 UTC  ·  Last refreshed 2026-09-14 09:30 UTC