es.myinvestor-portalclientes.com

Name: URL Security Scans for es.myinvestor-portalclientes.com
Creator: URLert
License: https://www.urlert.com/terms

Potentially Malicious Low Traffic Unranked

URLert Intelligence Note

🚨 Critical Phishing Alert: MyInvestor Impersonation

Risk Category: High-Risk Financial Phishing

URLert.com has classified myinvestor-portalclientes.com as a malicious domain actively engaged in a targeted credential theft campaign. This domain is a fraudulent clone designed to deceive customers of the Spanish financial institution, MyInvestor.

Findings and Evidence:

Brand Impersonation: The site utilizes unauthorized branding and visual assets to mimic the legitimate myinvestor.es login portal.
Evasion Tactics: Technical analysis confirms the site employs "cloaking" techniques. It serves a blank page to desktop users while displaying the phishing interface exclusively to mobile devices, a common tactic used to bypass automated security crawlers and desktop-based antivirus software.
Credential Harvesting: Visual evidence confirms the presence of a fraudulent login form requesting sensitive information, including DNI/NIE/Passport numbers and account passwords.
Zero-Day Registration: The domain was registered less than 24 hours ago and lacks any legitimate traffic history or reputation (Unranked), which is a hallmark of "disposable" phishing infrastructure.
Hosting: The site is currently leveraging Cloudflare infrastructure to mask its true origin and provide an appearance of security via HTTPS.

Recommendation: DO NOT interact with this website or enter any personal information. If you have already submitted credentials, contact MyInvestor immediately through their official, verified channels to secure your account and reset your security credentials. Always ensure you are visiting the official myinvestor.es domain before logging in.

es.myinvestor-portalclientes.com is classified as a potentially malicious site, focusing on financial phishing. This domain is a fraudulent website designed to impersonate the Spanish financial institution MyInvestor for the purpose of credential theft. It uses deceptive branding to trick users into providing sensitive account information.

phishingcredential theftfraudfinancial security

Network Infrastructure

Historical and current IP address mappings for this domain.

IP Address / Infrastructure	Status	Subdomains	Last Seen
172.67.147.217 CLOUDFLARENET (AS13335)	Active	es.myinvestor-portalclientes.com myinvestor-portalclientes.com	Today
104.21.57.168 CLOUDFLARENET (AS13335)	Active	es.myinvestor-portalclientes.com myinvestor-portalclientes.com	Today

172.67.147.217

CLOUDFLARENET (AS13335)

Active

es.myinvestor-portalclientes.com myinvestor-portalclientes.com

Seen Today

104.21.57.168

CLOUDFLARENET (AS13335)

Active

es.myinvestor-portalclientes.com myinvestor-portalclientes.com

Seen Today

Community Intelligence

Real experiences from people who visited this domain

Recent Threat Analysis

URLert analyzed recent scan activity for es.myinvestor-portalclientes.com and found 1 result.

Status	Target URL	Type	Time
Suspicious	http://es.myinvestor-portalclientes.com/		7h ago

Suspicious Activity

"This website was registered very recently and uses a name that looks like it's trying to imitate a legitimate financial institution. The page content also suggests a verification process, which is often used in phishing scams."

Quick Facts

Claimed Focus

Financial Phishing

Classification Note

This classification is based on website content analysis. Due to limited public reputation data, operator claims cannot be independently verified.

Industry Category

Potentially Malicious

Domains flagged for suspicious activity.

Newly Registered

myinvestor-portalclientes.com has limited public reputation data. No significant traffic ranking, less than 1 year old. Exercise caution when providing personal information.

No significant traffic rankingless than 1 year old

Something wrong?

• Domain owner?

Developer API

Integrate Domain Intelligence

Access this classification data programmatically via our API.

GET /api/v1/classify?domain=es.myinvestor-portalclientes.com

{
  "domain": "myinvestor-portalclientes.com",
  "confidence": "high",
  "category": {
    "purpose": "potentially_malicious",
    "specialization": "Financial Phishing"
  },
  "identity": {
    "headline": "Malicious phishing site impersonating MyInvestor",
    "summary": "This domain is a fraudulent website designed to impersonate the Spanish financial institution MyInvestor for the purpose of credential theft. It uses deceptive branding to trick users into providing sensitive account information.",
    "operator": null,
    "parent_entity": null,
    "topics": [
      "phishing",
      "credential theft",
      "fraud",
      "financial security"
    ]
  },
  "functions": {
    "is_ugc_platform": false,
    "is_file_host": false,
    "is_url_shortener": false,
    "is_public_idp": false,
    "is_crypto_platform": false,
    "allows_user_subdomains": false,
    "is_form_builder": false,
    "is_document_host": false
  },
  "facts": {
    "registered_date": "2026-03-17T17:42:03Z",
    "rank": null,
    "hosting_provider": "CLOUDFLARENET - Cloudflare, Inc."
  }
}

API Documentation ↗ • View Pricing ↗