santandermx.dothome.co.kr
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of santandermx.dothome.co.kr
This domain appears to host a page styled as a Banco Santander México login portal, using the title "SuperNet - Banco Santander" and Spanish-language prompts such as "Accede a tu cuenta SuperNet" and "Verifica tu identidad." The content suggests an attempt to collect banking login or account-identifying information from users seeking Santander Mexico's online banking service.
The site is not operating on an official Santander-owned domain. Instead, it is served from a subdomain of dothome.co.kr, a separate hosting platform based in South Korea. Based on the domain structure, page branding, and the presence of a link to the legitimate Santander Mexico website, this page appears to imitate a financial-services login experience rather than represent an official bank property.
Safety Assessment for santandermx.dothome.co.kr
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 19 out of 91 security engines, with many classifying it as phishing or fraud-related, and several web-classification sources also categorized it as phishing while one categorized it broadly as financial services. The page content closely resembles a Santander Mexico banking login and appears to use that branding on an unrelated hosted subdomain, which may indicate a look-alike page intended to capture sensitive credentials.
Blacklist and reputation data were mixed but still concerning. Major content-malice databases did not report the domain at the time of this scan, but one threat database listed it, and the domain's IP address was also listed on one mail-reputation blocklist. The malware scan did not report confirmed malicious files, though it did attach a generic malicious-object label to the domain and certain page assets, which is a weaker signal on its own but adds to the overall pattern when combined with the phishing detections and the page's visual impersonation of a banking portal.
Based on these findings, this website may pose potential risks to visitors, particularly anyone entering financial or account information.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, expiring in December 2026. It appears to be hosted on an Apache web server at IP address 112.175.185.134 in Seongnam-si, South Korea, on infrastructure associated with Kornet. DNSSEC status was not confirmed in the available data.
From a technical-trust perspective, the presence of HTTPS alone should not be treated as proof of legitimacy. A notable concern is that a page presenting itself as Santander Mexico is hosted under a third-party subdomain on dothome.co.kr rather than an official bank domain, which is inconsistent with normal banking deployment practices and may be a sign of impersonation.
Share your experience with this website. Was it safe? Did you encounter any issues?