Absa

Banking South Africaabsa.co.zaRank 244 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
3
1 reported or listed · 2 on phishing hosts
Registered lookalikes
237
5 listed by a source or an address list
Official domains
17
verified from Absa's own sites and records

Certificate findings for Absa

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Absa's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 3 findings, grouped by hostname

  1. www.equitybank.absabankgroup.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 24 d ago
    DetailsHide
    Hostname
    www.equitybank.absabankgroup.com
    First seen
    2026-11-02 10:47 UTC
    First published
    2026-11-02 11:09 UTC
    DNS
    Resolves · checked 2026-11-04 11:24 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 09:44 UTC to 2027-01-31 09:44 UTC
    Logged 2026-11-02 10:42 UTC in Google PlumbersArms2027h1, entry 570,922,857
    SHA-256 69e8fa142ede42e1ac7035c2a02159c33aaf3b3fe06b4986fb2ef7503afe6a1a
    Public key SHA-256 847d5bc3563d969a1d552f7b6aa626c8e54d4e98a8d0eeaf0804fc825d4f8445
    Brand
    Absa
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    absabankgroup.com
    Registered
    2026-10-12 · Ultahost, Inc.
    MX
    Receives mail at absabankgroup.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 12:17 UTC

    Suggest a correction

  2. equitybank.absabankgroup.com US · AS214036 · ULTAHOST-AS Ultahost, Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 24 d ago
    DetailsHide
    Hostname
    equitybank.absabankgroup.com
    First seen
    2026-11-02 10:47 UTC
    First published
    2026-11-02 11:09 UTC
    DNS
    Resolves · checked 2026-11-04 11:24 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.133.41.203.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.133.41.203
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-02 09:44 UTC to 2027-01-31 09:44 UTC
    Logged 2026-11-02 10:42 UTC in Google PlumbersArms2027h1, entry 570,922,857
    SHA-256 69e8fa142ede42e1ac7035c2a02159c33aaf3b3fe06b4986fb2ef7503afe6a1a
    Public key SHA-256 847d5bc3563d969a1d552f7b6aa626c8e54d4e98a8d0eeaf0804fc825d4f8445
    Brand
    Absa
    Addresses
    79.133.41.203 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    absabankgroup.com
    Registered
    2026-10-12 · Ultahost, Inc.
    MX
    Receives mail at absabankgroup.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 12:17 UTC

    Suggest a correction

  3. www.eugene.com US · AS14618 · Amazon.com, Inc.
    ReportedAmazon Web ServicesReported by PhishTank as imitating ABSA BankMX presentSPF -allDMARC rejectRegistered 31 y ago
    DetailsHide
    Hostname
    www.eugene.com
    First seen
    2026-10-30 07:05 UTC
    First published
    2026-10-30 07:37 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 06:05 UTC to 2027-01-28 06:05 UTC
    Logged 2026-10-30 07:04 UTC in Geomys Tuscolo2027h1, entry 404,438,490
    SHA-256 23a9521f36c12779a74d47531ce97cec1ef9ca7d32eb66e0863a8a5bdbe7e843
    Public key SHA-256 a1167eda151e0b536d661aa41010e53189f306dd6b0d2119dc2d655658c7eb6d
    PhishTank
    PhishTank report #7970038
    Brand
    Absa
    Addresses
    54.235.96.128 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (54.235.96.128): a cloud provider. It rents servers and addresses to its customers.
    Domain
    eugene.com
    Registered
    1995-07-17 · NameCheap, Inc.
    MX
    Receives mail at 0.0.0.0
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Absa when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Banking

All brands →