BNP Paribas

Banking Francemabanque.bnpparibasRank 276 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
4
4 on phishing hosts
Registered lookalikes
55
11 listed by a source or an address list
Official domains
6
verified from BNP Paribas's own sites and records

Certificate findings for BNP Paribas

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to BNP Paribas's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 4 findings, grouped by hostname

  1. www.bnpparibas-fr.com SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.bnpparibas-fr.com
    First seen
    2026-11-02 06:10 UTC
    First published
    2026-11-02 06:52 UTC
    DNS
    Resolves · checked 2026-11-05 07:03 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-02 05:11 UTC to 2027-01-31 05:11 UTC
    Logged 2026-11-02 06:09 UTC in DigiCert Wyvern2027h1, entry 377,859,296
    SHA-256 6adde147d00a749c0afaf22bfe6e8d3347d4940bac6347dcc27be5d8f7ee264c
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    BNP Paribas
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    bnpparibas-fr.com
    Registered
    2026-07-28 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  2. kcodvuidcb.kj7cxhiclb.bnpparibaszwrot.wasmer.app DE · AS213230 · HETZNER-CLOUD2-AS Hetzner O…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    kcodvuidcb.kj7cxhiclb.bnpparibaszwrot.wasmer.app
    First seen
    2026-11-02 05:06 UTC
    First published
    2026-11-02 05:45 UTC
    DNS
    Resolves · checked 2026-11-05 05:52 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.161.23.223.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.161.23.223
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-02 04:02 UTC to 2027-01-31 04:02 UTC
    Logged 2026-11-02 05:01 UTC in DigiCert Sphinx2027h1, entry 332,504,195
    SHA-256 64cab728aa8777f9251709137be775ad5daa1a7a6b602aae45f37b1e12ad8382
    Public key SHA-256 8dfd57376d2e16df6850f6a0d038e474d04db121f1a59510c34ee2439b654207
    Brand
    BNP Paribas
    Addresses
    5.161.23.223 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH

    Suggest a correction

  3. www.mabanque.pro FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    www.mabanque.pro
    First seen
    2026-10-31 09:11 UTC
    First published
    2026-10-31 09:25 UTC
    DNS
    Resolves · checked 2026-11-05 09:35 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.165.53.185.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.165.53.185
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 08:09 UTC to 2027-01-29 08:09 UTC
    Logged 2026-10-31 09:07 UTC in Let's Encrypt Willow2027h1, entry 862,075,481
    SHA-256 7314ff42c5baae15bc371aa397bad1764daa822afff1cbc812708e9727ef97a4
    Public key SHA-256 9d1886676b4b92bb7b616f99b64e3b6ed4da92d6189296225eda33e9bb9a850c
    Brand
    BNP Paribas
    Addresses
    188.165.53.185 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (188.165.53.185): a cloud provider. It rents servers and addresses to its customers.
    Domain
    mabanque.pro
    Registered
    2018-05-15 · OVH SAS
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  4. mabanque.pro FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    mabanque.pro
    First seen
    2026-10-31 06:31 UTC
    First published
    2026-10-31 07:17 UTC
    DNS
    Resolves · checked 2026-11-05 07:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.165.53.185.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 188.165.53.185
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 05:31 UTC to 2027-01-29 05:31 UTC
    Logged 2026-10-31 06:29 UTC in IPng Networks Gouda2027h1, entry 276,114,073
    SHA-256 7d5eb3c41f099f7cf91ef0cf8b04ce5c84a7f78a703f73252b690c9e6af7eba6
    Public key SHA-256 b13ea8286003e09ee99ef8d168e72e2e5975ee100cbc59e17952ae3e6e742012
    Brand
    BNP Paribas
    Addresses
    188.165.53.185 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (188.165.53.185): a cloud provider. It rents servers and addresses to its customers.
    Domain
    mabanque.pro
    Registered
    2018-05-15 · OVH SAS
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches BNP Paribas when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Banking

All brands →