MALICIOUS — CRITICAL
credwaybk[.]com
12 of 91 security engines flagged the domain; the latest stored check returned HTTP 502.
- VirusTotal
- 12/91
- Blocklists
- No stored match
- Ketersediaan
- Konten tidak tersedia · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
credwaybk.com — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Genericbanking; Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 12/91 (ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, CRDF, ESET); URLScan malicious verdict; PhishDestroy score 91/100. Registrar: COSMOTOWN.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Digest
credwaybk.com is classified critical with an evidence score of 91/100. 12 of 91 security engines flagged the domain. Registered 7 Jan 2026 via COSMOTOWN, INC., hosted on 163.61.188.2 (US). The latest stored check on 9 Aug 2026 returned HTTP 502 and includes a capture. 1 outgoing abuse report is recorded, most recently on 30 May 2026.
Stored generated summary (templated)mistral · 26/06/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
This domain, credwaybk.com, is identified as a credential theft operation targeting users of CredWay Bank. The site mimics the legitimate banking portal to deceive visitors into submitting login credentials, personal information, or financial details. Such stolen data is typically exploited for unauthorized account access, fraudulent transactions, or identity theft. The impersonation extends to visual design, page structure, and branding elements to appear authentic to unsuspecting users. Analysis indicates the domain was registered on January 07, 2026, through COSMOTOWN, INC., a registrar frequently associated with malicious infrastructure. Security vendors on VirusTotal flagged the domain, with 12 out of 95 engines detecting it as malicious. The site resolves to the IP address 163.61.188.2 and employs technologies such as Tailwind CSS, LiteSpeed, Alpine.js, and Smartsupp for functionality and tracking. It also appears on one security blocklist, and its Gridinsoft trust score is 1/100, further confirming its high-risk nature. If you visited credwaybk.com and entered any credentials or personal information, immediate action is required. First, disconnect the affected device from the internet to prevent potential data exfiltration. Change passwords for all accounts accessed from the device, prioritizing financial and email accounts. Enable multi-factor authentication where available. Monitor bank statements and credit reports for unauthorized activity, and report any suspicious transactions to your financial institution. Consider scanning the device with updated security tools to detect and remove any malware. If sensitive data was exposed, notify relevant authorities or identity protection services to mitigate further risks.
Cakupan data13 recorded checks
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 6 identified
Smartsupp is a live chat tool that offers visitor recording feature.
www.smartsupp.com Keyakinan 100%JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of credwaybk.com · checked Jun 26, 2026
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260530-51D7B6 Recipient: abuse@cosmotown.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.