Phishing detection: satanderconsumers.ca

Banco Santander
https://satanderconsumers.ca Access site
Screenshot
Screenshot of satanderconsumers.ca

Screenshot captured by urlscan.io on 2026-10-19T16:01 UTC: our own render of this page came back blank.

Investigate
URL https://satanderconsumers.ca
Cert Google Trust Services
Phishunt analysis Beta
31 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +5.1 urlscan.io
  • +4.1 Brand in screenshot
  • +3.4 Shared IP cluster
  • +2.2 Country mismatch
  • +1.3 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.6 Registrar reputation
  • +0.6 Suspicious TLD
  • +0.5 Young certificate
  • +0.4 Long domain
  • +0.3 Free CA
  • +0.2 External scripts
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Misspelled Santander lookalike on a Canadian .ca domain, with the bank name shown in page content. Behind Cloudflare on an IP shared with other suspicious sites and reported to urlscan, it likely collects banking credentials from Santander Consumer customers.

urlscan.ioBrand in screenshotShared IP cluster
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-19 · confidence 65%
Domain & Network
Whois
Network
IP 188.114.96.3 Cloudflare CDN
Country United StatesUnited States
ASN AS13335
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Network / ASN Cloudflare, Inc.

Tracked from 2026-10-19 16:02 UTC  ·  Last refreshed 2026-10-23 05:30 UTC