crypto-bankapp[.]com

Analysis of crypto-bankapp.com indicates a high‑risk brand‑impersonation campaign targeting users of financial services. The domain was registered through GRANSY S.R.O D/B/A SUBREG.CZ and was created on March 03, 2021. Gridinsoft assigns it a trust score of 0 out of 100, reflecting extreme suspicion. The site presents the page title "Crypto Bank ™ - The Official App WebSite 2025 [UPDATED]", which aligns with a banking phishing scam narrative, though the actual page content has not been examined. Technical observation shows the domain resolves to IP address 185.62.57.66, located in the Netherlands under ASN 62370 (Snel.com B.V.).

The IP is served by Cloudflare, with authoritative nameservers ada.ns.cloudflare.com and decker.ns.cloudflare.com, and the web server runs Nginx behind Cloudflare’s HTTP/3 implementation, loading Google Hosted Libraries and Google Font API. The site operates over HTTPS using a Let's Encrypt certificate (Issuer: E7). An HTTP 301 redirect is observed, suggesting redirection to another location or landing page. Detection data reveals that 13 of 95 VirusTotal scanners flag the domain as malicious, and AlienVault OTX includes it in five threat‑intel pulses.

It appears on one security blocklist and is explicitly blocked by PhishDestroy, confirming active enforcement by at least one anti‑phishing service. While the page title and scam type (banking phishing) provide clear indicators of intent, the lack of direct visual analysis leaves the exact user‑facing content uncertain. Defenders should immediately block crypto-bankapp.com and its resolving IP 185.62.57.66 at network perimeters, update URL filtering and threat‑intel feeds, and monitor for any related domains using the same registrar or nameserver configuration. Users should be warned that any unsolicited communication referencing "Crypto Bank" is likely fraudulent, and credential entry on this domain should be avoided.