hartbayfederal[.]com

The domain www.hartbayfederal.com was registered through Name.com on 21 February 2026. The site resolves to the IPv4 address 194.233.84.235, which belongs to AS141995 Contabo Asia Private Limited and is geolocated in Singapore. The hosting provider uses Contabo nameservers ns1.contabo.net, ns2.contabo.net, and ns3.contabo.net. An HTTPS service is presented with a Let’s Encrypt R13 certificate, indicating a valid TLS handshake but offering no additional trust. The HTTP response returns status code 200 and the page title reads “Hartbay Federal Credit Union - Financial Services You Can Trust,” suggesting an attempt to masquerade as the e‑banking portal of Hartbay Federal Credit Union.

Automated analysis identified a suite of common web components, including Google Maps, Bootstrap, Apache HTTP Server, Smartsupp, OWL Carousel, Lightbox, jQuery, and Google Hosted Libraries. The domain appears on one security blocklist and is flagged by PhishDestroy, confirming its inclusion in active phishing mitigation lists. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal reports that 12 of 93 scanning engines label the domain as malicious, providing independent corroboration of its abusive nature.

Despite these indicators, the site remains reachable, and no public takedown has been recorded as of the report date (25 July 2026). The evidence points to a newly created phishing infrastructure that leverages legitimate web libraries to appear authentic while targeting users of the Hartbay Federal Credit Union brand. Defenders should block the domain at network perimeters, update URL filtering and threat intelligence feeds with the observed indicators, and monitor for additional domains registered by the same registrar or hosted on the same IP range. Continuous re‑evaluation of the blocklist status and VirusTotal detections is advised to capture any changes in the threat landscape.