app[.]capitalcrestpointbank[.]com
“Remedy bank - Dedicated to innovating, simplifying, and humanizing digital banking.”
Rilevamento memorizzato
Avviso di cloaking
- Tipo di cloaking
content_divergence- Punteggio di cloaking
- 1/6
Riepilogo delle prove
Analysis on 24 July 2026 flags app.capitalcrestpointbank.com as an active brand‑impersonation site used for banking phishing. The domain was registered through Dynadot LLC on 2 October 2025 and resolves to the IPv4 address 198.23.193.170, which is hosted by AS36352 (HostPapa) in the United States. DNS resolution is served by dns1.geebytesdns.com and dns2.geebytesdns.com. HTTP requests return a 301 redirect, and the presented TLS certificate is issued by Let’s Encrypt with an E7 validation level, indicating no extended validation. The page title extracted from the live site reads “Remedy bank – Dedicated to innovating, simplifying, and humanizing digital banki”, confirming a banking‑oriented lure. Threat intelligence shows the domain is currently listed on one security blocklist and has been blocked by PhishDestroy.
VirusTotal scans report that 2 of 95 AV engines flagged the domain, providing independent confirmation of malicious intent. Gridinsoft assigns a trust score of 0 / 100, reinforcing the classification as high‑risk. The site is categorized as a banking phishing campaign and is marked as a brand impersonation attempt, though the specific victim brand is not disclosed beyond the generic “across” label. Uncertainties remain regarding the exact phishing payload, credential‑capture mechanisms, and whether additional infrastructure (e.g., command‑and‑control servers) is associated with the IP address. No Safe Browsing, OTX, or additional blocklist entries are present in the current feed.
Defenders should immediately block DNS resolution for app.capitalcrestpointbank.com and any sub‑domains, enforce HTTP‑based deny‑list rules for the hosting IP 198.23.193.170, and monitor outbound traffic for connections to HostPapa AS36352. Email gateways should be updated to flag messages containing the domain or the “Remedy bank” title. Continuous re‑scanning with VirusTotal and other multi‑engine scanners is advised to detect any changes in detection rates.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 13/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Stato del dominio
Raggiungibile → Non raggiungibile
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Registration: capitalcrestpointbank.com
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain capitalcrestpointbank.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Analisi della configurazione del sito
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo