leia-santander.vercel.app

Banco Santander

http://leia-santander.vercel.app Access site

Screenshot

Investigate

Domain leia-santander.vercel.app0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 64.29.17.131

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL http://leia-santander.vercel.app

urlscan

Wayback

archive.today

Cert WR1

crt.sh

Censys

Google CT

Phishunt analysis Beta

39 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.1 Brand in screenshot
+3.4 Shared IP cluster
+3.2 Brand favicon
+3.0 OpenPhish
+2.2 Country mismatch
+1.6 Favicon (kit)
+1.1 ASN reputation
+1.1 No CSP header
+0.6 Login text in screenshot
+0.6 Suspicious TLD
+0.5 Young certificate
+0.5 Long domain
+0.3 Free CA
+0.1 Hyphens
+0.1 Deep subdomain

23 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site hosted on Vercel impersonates Santander bank, confirmed by visible branding and login keywords in the page text. Flagged independently by Google Safe Browsing and OpenPhish as social engineering; likely targets Spanish-speaking banking customers to harvest online banking credentials.

OpenPhishGoogle Safe BrowsingLogin text in screenshot

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-24 · confidence 82%

Domain & Network

Whois

Registrar Tucows Domains Inc

Network

IP 64.29.17.131

Country