Phishing detection: admin.santandercitas.com

Banco Santander
https://admin.santandercitas.com Access site
Screenshot
Screenshot of admin.santandercitas.com
Investigate
Domain admin.santandercitas.com3 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 216.150.16.129
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://admin.santandercitas.com
urlscan Wayback archive.today
Cert Let's Encrypt
crt.sh Censys Google CT
Phishunt analysis Beta
28 low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelurlscan.io
18 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Santander bank using a domain suggesting an official appointments or scheduling service and is hosted in the United States on AWS despite targeting Spanish-speaking customers. It is confirmed malicious by urlscan and lacks key security headers.

Brand in domain labelCountry mismatchurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 80%
Domain & Network
Whois
Registrar Soluciones Corporativas IP, SL
Network
IP 216.150.16.129
Country United StatesUnited States
Hosting Amazon.com, Inc.
ASN AS16509
TLS Cert Let's Encrypt
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Network / ASN Amazon.com, Inc.
abuse@amazonaws.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-05-12 10:55 UTC  ·  Last refreshed 2026-08-04 13:30 UTC