Phishing detection: mi-santander.com

Banco Santander
http://mi-santander.com Access site
Screenshot
Screenshot of mi-santander.com
Investigate
Domain mi-santander.com0 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 109.234.167.178
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://mi-santander.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
20 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +3.2 Young domain
  • +3.0 TweetFeed
  • +2.2 Country mismatch
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.9 No registrar lock
  • +0.7 Bulletproof DNS
  • +0.6 Registrar reputation
  • +0.3 Long domain
  • +0.2 Suspicious TLD
  • +0.1 Hyphens
17 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

A Santander bank phishing site on a newly registered domain hosted in France by O2Switch, flagged by TweetFeed. Displays Santander branding with color mismatches and no legitimate outbound links to the bank, likely designed to harvest online banking credentials.

TweetFeedNo registrar lockKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-27 · confidence 60%
Domain & Network
Whois
Registrar Scaleway SAS
Network
IP 109.234.167.178
Country FranceFrance
Hosting O2SWITCH SAS
ASN AS50474
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-27 00:04 UTC  ·  Last refreshed 2026-09-07 03:30 UTC