Phishing detection: satanderconsumers.ca
Banco Santander Screenshot
Screenshot captured by urlscan.io on 2026-10-19T16:01 UTC: our own render of this page came back blank.
Investigate
Domain
satanderconsumers.ca1 CT host on apex
IP
188.114.96.3
URL
https://satanderconsumers.ca
Cert
Google Trust Services
Phishunt analysis Beta
31
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +5.1 urlscan.io
- +4.1 Brand in screenshot
- +3.4 Shared IP cluster
- +2.2 Country mismatch
- +1.3 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.6 Registrar reputation
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.4 Long domain
- +0.3 Free CA
- +0.2 External scripts
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Misspelled Santander lookalike on a Canadian .ca domain, with the bank name shown in page content. Behind Cloudflare on an IP shared with other suspicious sites and reported to urlscan, it likely collects banking credentials from Santander Consumer customers.
urlscan.ioBrand in screenshotShared IP cluster
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-19 · confidence 65%
Domain & Network
Whois
Registrar
Go Daddy Domains Canada, Inc
Network
IP
188.114.96.3 Cloudflare CDN
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Google Trust Services
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise