santander2026.dothome.co.kr
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of santander2026.dothome.co.kr
This website appears to present itself as an online banking login page for Santander, specifically referencing "SuperNet" and Banco Santander México in Spanish. The page asks visitors to verify their identity and enter customer, account, or card information, which suggests it is designed to imitate a financial account-access portal rather than provide general informational content.
Based on the domain structure, the site is hosted as a subdomain of dothome.co.kr, a third-party hosting platform, rather than on an official Santander-owned domain. The page title includes "Banco Santandeer," which appears to be a misspelling of Santander, and the overall branding shown in the screenshot may indicate an attempt to resemble the bank's legitimate online banking interface.
The underlying parent domain dothome.co.kr is longstanding, but that age does not appear to establish legitimacy for this specific hosted subdomain. Based on the available content and branding, this page may be intended to collect banking credentials from users expecting to reach Santander's real login service.
Safety Assessment for santander2026.dothome.co.kr
Multiple security signals raise concern about this page at the time of this scan. It was flagged by 12 out of 91 security engines, with many of those detections classifying it as phishing or malicious. In addition, the screenshot shows a banking-style login form using Santander branding on a third-party hosted subdomain, which may indicate an attempt to imitate a legitimate financial institution and collect sensitive account details.
Although the malware file scan did not detect malicious files and several major threat databases were clean at the time of this scan, those findings do not outweigh the stronger phishing indicators here. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but adds a small amount of caution. The combination of brand-like banking content, a non-official hosting domain, and multi-engine phishing detections materially increases risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate issued by GlobalSign and served over HTTPS, with certificate expiry listed as 2026-12-13. It is hosted on IP address 112.175.185.138, appears to run Apache, and is located in Seongnam-si, South Korea on Kornet infrastructure. DNSSEC status is unknown.
From a technical trust perspective, the presence of HTTPS should not be treated as proof of legitimacy. A notable concern is that the page is hosted on a dothome.co.kr subdomain rather than an apparent official Santander banking domain, which is unusual for a financial login portal. The parent domain is old, but the scan data does not establish the age or legitimacy of this specific subdomain deployment.
Share your experience with this website. Was it safe? Did you encounter any issues?