Domain Due Diligence
Report for Mbhbank.hu
Why we think so
mbhbank.hu appears to be the official site of MBH Bank (MBH Bank Nyrt.), a Hungarian bank with many physical branches and active local listings. Technical signals (valid SSL, CDN/services, and heavy site traffic) and contact details on the site point to a legitimate, established organization. However, multiple recent news reports and consumer alerts describe phishing campaigns that impersonated the bank and caused customer losses; the bank and Hungarian authorities have responded and the bank agreed to limited compensation for victims. Overall: legitimate but with active fraud risks targeting customers — exercise caution and verify communications directly with the bank.
Risk Insights
Legitimate bank with active branches
High fraud risk to customers (phishing)
Contradictory Signals
Automated category classification (similartech) appears incorrect or outdated; other evidence (branch listings, corporate PDFs) strongly supports a banking identity.
Signal A: SimilarTech classifies site as Gambling > Lottery
Signal B: Google Places and corporate documents identify MBH Bank as a bank with branch network
Category Scores
Red Flags & Warnings
-
Multiple news and consumer-alert sources document phishing scams impersonating MBH Bank and customers losing funds.
-
Regulatory fine by Hungary’s central bank for compliance and fraud-management shortcomings.
-
WHOIS metadata in the retrieved snapshot is sparse (missing registrar/expiry), which reduces transparency for quick checks.
🔎 Detailed Checks & Analysis
Identity — corporate presence & contact data
Identity — corporate presence & contact data
"MBH Bank appears in many official PDFs and on Google Places with the same website and phone number, which supports a verifiable corporate identity."
Reason: Consistent corporate emails, investor relations documents, and many Google Places branch listings match the domain and brand.
Reputation — news, complaints, regulatory history
Reputation — news, complaints, regulatory history
"News sources report phishing attacks that impersonated MBH Bank and a past fine from the Hungarian central bank for compliance gaps; this lowers reputation score relative to a flawless record."
Reason: Mixed: legitimate bank with regulatory fines and recent phishing victim reports affecting customers.
Technical — SSL, hosting, WHOIS, tech stack
Technical — SSL, hosting, WHOIS, tech stack
"SSL issued by e‑Szigno is valid; infrastructure uses Akamai/CloudFlare and common analytics, which is typical for large sites. WHOIS metadata in the scrape lacked registrar/expiry, a transparency gap to note."
Reason: Valid SSL certificate and enterprise CDN/analytics usage; DNS/A records present though WHOIS fields were incomplete in the snapshot.
Content — contact pages, transparency, legal notices
Content — contact pages, transparency, legal notices
"The site hosts investor materials, privacy and whistleblowing pages and PDFs that include contact details and legal notices, which is consistent with a regulated financial institution."
Reason: Site contains corporate PDFs, privacy/whistleblowing docs and many contact points, indicating attention to disclosure.
Threat listings — Google Safe Browsing & crypto blacklists
Threat listings — Google Safe Browsing & crypto blacklists
"Fetched threat-checks show no active detection for the domain, reducing the likelihood the site itself hosts malware or phishing content."
Reason: No matched threats from Google Safe Browsing and not listed on crypto scam blacklists.
Traffic & popularity — active user base
Traffic & popularity — active user base
"SimilarTech reports ~1.8 million monthly visits and Hungary as the leading country, a sign of substantial legitimate usage rather than a throwaway scam landing page."
Reason: High estimated monthly traffic (~1.8M) and concentrated traffic from Hungary support a real, active service.
Your Next Steps
-
1If you received an unexpected message or link claiming to be MBH Bank, do not click it; contact the bank using the phone number on its official site or a Google Places listing (+36 80 350 350).
-
2Report suspected phishing to MBH Bank and to local authorities (Hungarian consumer protection / police).
-
3If you lost money after responding to a scam, check whether you qualify for the bank’s announced compensation and retain all transaction and message evidence.
-
4Verify any financial instruction by calling the bank’s official customer service number (found on the website and Google Places) before transferring funds.
-
5Enable two-factor authentication and review recent account activity; consider a fraud alert with your bank if you suspect compromise.
Evidence & Citations
-
SimilarTech site profile for mbhbank.hu (traffic, technologies)
Shows ~1.8M monthly visits, leading traffic country Hungary, and use of Akamai/CloudFlare and analytics — consistent with an active, enterprise site.
-
Google Places entries for MBH Bank (branch listings & phone)
Multiple physical branch listings in Budapest with the same official website and phone number (+36 80 350 350).
-
News: Reports of phishing victims and MBH Bank compensation
Describes 'Google-fraud' phishing incidents and the bank’s compensation policy for certain victims.
-
Hungary central bank fines MBH Bank for compliance failings
Regulatory action relating to risk-management and compliance shortcomings during bank merger activity.
-
WHOIS / DNS / SSL snapshot for mbhbank.hu
SSL is valid (e‑Szigno CA) and DNS has multiple A records; WHOIS fields in the scraped snapshot lack registrar/expiry entries.
-
Website contact scrape (emails, phones, social links)
Corporate emails (eg. ugyfelszolgalat@mbhbank.hu, openbanking@mbhbank.hu) and phone numbers appear across PDFs and site pages, supporting legitimate identity.
-
Google Safe Browsing lookup — no threats found
No matched threats in the fetched data, indicating the site itself is not currently flagged as malicious.
🕵🏻 Keep investigating
Run another instant due diligence scan on any website URL. Verify before you trust!
Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...
Read playbook →Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...
Read playbook →