public company · US
Banco Santander, S.A.
- Primary official domain
- santander.com
- Reviewed official domains
- 1 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
30
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
1
domains first source-reported within 30 days
First observed, 30 days
36
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 3/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
account-seguridadsantander[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.26.0.20104.26.1.20172.67.73.1502606:4700:20::681a:1142606:4700:20::681a:142606:4700:20::ac43:4996checked 2026-10-19 04:55 UTC | 1 source · 1 record | Details |
santandervidaygenerales[.]actions-online[.]comMail: MXSPFDMARC · via deliverabilitymanager.net · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive52.49.84.247checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
dev-quizsantander[.]aumentable[.]comMail: MXSPF · via aumentable.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
carneslasantandereana[.]comMail: MXSPFDMARC · via hostinger.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive84.32.84.7188.222.222.1212a02:4780:84:ecf9:4fc:2ad5:dd16:7da72a02:4780:84:84c8:c15c:bfdc:a158:8593checked 2026-10-19 04:48 UTC | 1 source · 1 record | Details |
casinosantander[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.22.194172.67.206.2242606:4700:3030::6815:16c22606:4700:3032::ac43:cee0checked 2026-10-19 04:48 UTC | 1 source · 1 record | Details |
santanderbank[.]com[.]cobblestonesw[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.26.14.207104.26.15.207172.67.74.522606:4700:20::681a:ecf2606:4700:20::681a:fcf2606:4700:20::ac43:4a34checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
comercialbancosantanderconsigorg[.]orgMail: MXSPF · via google.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive198.185.159.145checked 2026-10-19 04:49 UTC | 1 source · 1 record | Details |
santandermx[.]dothome[.]co[.]kr2 hostnames under dothome.co.krMail: MXSPFDMARC · via dothome.co.kr · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive112.175.185.134checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
websantander1[.]dothome[.]co[.]kr | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive112.175.185.134checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santander[.]learn-on-demand[.]co[.]ukMail: SPFDMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive35.214.69.249checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
observatoriologisticodesantander[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.11.166172.67.166.1712606:4700:3036::6815:ba62606:4700:3036::ac43:a6abchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
proteccion-santander[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.26.12.123104.26.13.123172.67.70.612606:4700:20::681a:c7b2606:4700:20::681a:d7b2606:4700:20::ac43:463dchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santander[.]pt-atendimento[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santander-gt[.]comMail: MXSPFDMARC · via santander-gt.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive75.102.22.59checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santander-portugal[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.53.179.136checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santander-protocolo[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.53.179.136checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santander-verwalten[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santanderbizum[.]comMail: MXSPFDMARC · via santanderbizum.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive163.61.188.7checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santanderbranchdesign[.]comMail: SPFDMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive13.248.172.22476.223.40.224checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
admin[.]santandercitas[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive216.150.1.193216.150.16.193checked 2026-10-19 04:55 UTC | 1 source · 1 record | Details |
santandercycling[.]com[.]coMail: MXSPFDMARC · via cloudflare.net · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.86.5172.67.213.812606:4700:3033::ac43:d5512606:4700:3035::6815:5605checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santandereano[.]com[.]coMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.16.246172.67.217.832606:4700:3032::ac43:d9532606:4700:3035::6815:10f6checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santanderinvest-es[.]liveMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santanderinvest[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive166.75.62.48checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santanderinvestsystem[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.62.57.222checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
santanderplatform[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.17.231172.67.178.1662606:4700:3031::ac43:b2a62606:4700:3032::6815:11e7checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
30 registrable domains · 31 hostnames · page 1 of 2Next →
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.