berkcred[.]com

As of July 12, 2026, the domain berkcred.com has been confirmed as an active credential phishing site. The domain, registered through Fewmoretaps OU d/b/a Trustname.com on April 21, 2026, is currently hosting a platform with the page title 'Berk Credit - Online Banking Platform'. This suggests an attempt to mimic a legitimate banking website to deceive users into divulging sensitive information such as usernames and passwords. The site is supported by a range of web technologies including PHP, Bootstrap, Nginx, jQuery UI, jQuery CDN, jQuery, FancyBox, and Popper, which are commonly used in legitimate web development but can also be leveraged for malicious purposes. The domain has been flagged by 19 of 94 security vendors, indicating a high level of suspicion among the cybersecurity community. Additionally, the domain has been included in 22 threat intelligence pulses on AlienVault OTX and appears on one security blocklist, further corroborating its malicious nature. The IP address 195.20.18.202, associated with Alexhost SRL in MD, has been identified as the hosting location. The SSL certificate is issued by Let's Encrypt, which, while not inherently malicious, can be used to enhance the credibility of phishing sites. Given the current status of the domain as active and the high risk level, it is recommended that network defenders block access to this domain and educate users about the dangers of credential phishing. The exact content and layout of the site have not been analyzed, but the available evidence strongly suggests that it poses a significant threat to online security.