pay-interbank[.]webcindario[.]com

pay-interbank.webcindario.com is a banking phishing domain designed for credential theft by impersonating an Interbank login page. The domain is now offline, but during its active period it posed a significant risk to users attempting to access their bank accounts. This threat falls under the category of brand impersonation, targeting customers of Interbank with a fake login interface.

The domain was created on February 28, 2001, and registered through Tucows Domains Inc. It resolved to IP address 5.57.226.202 before being taken down. Security scans revealed that 14 out of 95 VirusTotal vendors flagged the domain as malicious, indicating widespread detection across the cybersecurity industry. Additionally, the domain appears on 2 security blocklists, and its SSL certificate was issued by Let's Encrypt (R13), a common technique used by phishers to appear legitimate. Trust and safety scores from various sources further confirm its malicious intent.

As of the latest analysis, pay-interbank.webcindario.com has been taken offline, reducing the immediate threat. However, users who may have interacted with the site should change their banking credentials immediately and enable multi-factor authentication. PhishDestroy strongly advises avoiding any unsolicited links claiming to be from Interbank and always verifying the URL in the browser's address bar. Stay vigilant against similar domains that may resurface under different names.