Security Scan: Santander Mexico

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/188f8146-aaec-468a-8af1-f8287c8069ee Domain and IP registration (RDAP)/api/v1/rdap/188f8146-aaec-468a-8af1-f8287c8069eeHow often this domain was scanned/api/v1/domain/stats/santander-inicio.vercel.app Scan history for this domain/api/v1/domain/history/santander-inicio.vercel.app?limit=15

This website contacted 3 IPs in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://santander-inicio.vercel.app/

Effective URL:

https://santander-inicio.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Fake Santander Mexico banking login on a free vercel.app subdomain asking for card/client numbers, with inline IP-harvesting script — a textbook bank phishing page, not Santander.

Risk Factors (5)

Brand impersonation of Santander (a different entity) on a domain that is not Santander's official domain

Bank login/credential solicitation served from an anonymous free hosting subdomain (vercel.app)

Deceptive hostname 'santander-inicio' designed to look like an official Santander entry point

Cross-origin IP-harvesting request to api64.ipify.org from inline script

Domain unranked in Cisco Umbrella despite claiming to be a major global bank

Domain age information unavailable

Details

Page Title

Santander Mexico

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'santander-inicio.vercel.app' is registered with subdomain 'santander-inicio'. The registrable portion 'vercel' spans 6 characters holding two vowels versus 4 consonants. Splitting it apart reveals two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.29s

Total Load Time

5 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:144 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking78% confidence

Type: static

Method: ml+structural

All Detected Categories

finance banking

78%

government public service

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	3	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E8D1865A52F308365A57A0AC2BF796453250D403964ACD6C3F9CB3648F8A69DCAF378C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PukGX0aX4c5UDz9RoXU6OTaJXqXYEwj/IC29IYUFGi6K6Gsp4Hs:TUx488z9WtOTaJOYEQ/ICQITANGsMs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6312:hggoIQFYQhlABQcBECBRwQEQhAAIYBOKABEIEYIjACIcAAKACEpIcABAjKCkI0OAyAjgGZEUFIQRQUoEMAByoBoPAyAAo8IB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7efe7e7e7ffffff

Perceptual Hash:b333336666663319

Difference Hash:0c2a080808000000

Wavelet Hash:0062c0d8c0d0cccc

Color Hash:#b7bf40

Other Hashes

Crop Resistant:0c28080808000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: santander-inicio.vercel.app