List of Online banking sites in your country?

[REDACTED]

... some Iranian banks:

8_ www.bmi.ir
9_ www.ebanksepah.ir
10_ www.karafarinbank.ir
11_ www.edbi.ir
12_ www.bim.ir
13_ www.bki.ir
14_ www.bank-maskan.ir
15_ www.ttbank.ir

[REDACTED]

United States:

Marion and Polk Schools Credit Union (in Oregon, USA): https://www.mapscu.com/
Online Banking link from MAPS CU goes to https://arch6.onlinebank.com after grabbing the user-id.

[polonus]

Freshly registered domains that gonna be abused for PHISHING:

1hn3qc1q8f-ing-11 punt ru
3b9v6cftk1-ing-11 punt ru
4t0d5b5jq5-ing-11 punt ru
51at7l58bw-ing-11 punt ru
71besd8n4h-ing-11 punt ru
777731o9ri-ing-11 punt ru
9boo63831s-ing-11 punt ru
as10q6sen8-ing-11 punt ru
dvde6fy3w1-ing-11 punt ru
ix05i9iu4o-ing-11 punt ru
k21t59hj6k-ing-11 punt ru
m6bvlbxixa-ing-11 punt ru
nsen6s0gkp-ing-11 punt ru
r57b3uyb8b-ing-11 punt ru
rti7oaf7sx-ing-11 punt ru
ts08lyw1at-ing-11 punt ru
ur1snj72dz-ing-11 punt ru
vh34g6q9wz-ing-11 punt ru
xsbcvf3xdh-ing-11 punt ru
y1y2vmdh0q-ing-11 punt ru
0zg1mlucsg-ing-ing punt ru
4vvllworjx-ing-ing punt ru
6hxkp0ahxy-ing-ing punt ru
7t5lrxx9j6-ing-ing punt ru
b9hj49e8n4-ing-ing punt ru
cexup76e2u-ing-ing punt ru
d2tm491e6m-ing-ing punt ru
jcnihf7b9f-ing-ing punt ru
kp3l3sizmx-ing-ing punt ru
me3414ncrb-ing-ing punt ru
mj263w4tqp-ing-ing punt ru
n3t2wf3ffq-ing-ing punt ru
nlfas5obrv-ing-ing punt ru
pn99x2x6vc-ing-ing punt ru
pxu7drjyn5-ing-ing punt ru
r1g6g6a7id-ing-ing punt ru
s8dk9goqfa-ing-ing punt ru
wbnwtxfvhi-ing-ing punt ru
ww2ws3vyzl-ing-ing punt ru
zqsk1eih37-ing-ing punt ru
9oz8o5ydpa-ing-k8z669bahs punt ru
cas5ii5x23-ing-94rdfiez96 punt ru
dpbm7j44m8-ing-5ufo7g3rih punt ru
e4sflcny58-ing-vsk2r8dgzd punt ru
ef91ad76nk-ing-l47mvn4il5 punt ru
ff8a774wk3-ing-v4cxrxi4gx punt ru
g8mu4ibtax-ing-hs2hzvnx4n punt ru
jbycvft80g-ing-24avyr4z7t punt ru
jmddcqjixx-ing-rbmqi65xmo punt ru
kahrin9ll8-ing-u1itds5rvu punt ru
lg3u4jjo05-ing-8nfsmdxs7k punt ru
n7mln06i4z-ing-whg8uy2ljp punt ru
nzg8qy628g-ing-kqtl2h4vkx punt ru
p9qui2wnsq-ing-qsmcko6q2t punt ru
r5c5tiikkf-ing-c5yge5bage punt ru
rypdt19vlp-ing-3f8s1kzmx7 punt ru
tnn2jophhg-ing-u0celip70c punt ru
wjqdo8pykh-ing-sce0tztu32 punt ru
xcgh4w2bwt-ing-vrvet8kk3l punt ru
y74lyp75br-ing-hf05udyd79 punt ru
internetbankieren-ing-01mtapgsgv punt ru
internetbankieren-ing-0twh4o7hja punt ru
internetbankieren-ing-18ysfgrkhb punt ru
internetbankieren-ing-1hpf326e1q punt ru
internetbankieren-ing-3bz10vzkhs punt ru
internetbankieren-ing-6sxt5gkc0o punt ru
internetbankieren-ing-7uj5mwentw punt ru
internetbankieren-ing-87026p449u punt ru
internetbankieren-ing-d6n5um8qlg punt ru
internetbankieren-ing-jn4fzea769 punt ru
internetbankieren-ing-pp6reukpbc punt ru
internetbankieren-ing-qshl3xjjrc punt ru
internetbankieren-ing-ufzpdwlrec punt ru
internetbankieren-ing-v8k2skkkon punt ru
internetbankieren-ing-vwala1fnpz punt ru

  for Dutch punt read dot

Avast could block these....

polonus

[bob3160]

Freshly registered domains that gonna be abused for PHISHING:
[Snip]

  for Dutch punt read dot

Avast could block these....

polonus

These are banking sites

[DavidR]

Freshly registered domains that gonna be abused for PHISHING:
[Snip]

for Dutch punt read dot
Avast could block these....
polonus

These are banking sites

The domain names look too random to be legit banking sites. More like something as polonus said a phishing site may redirect traffic to these sites.

[HonzaZ]

I blocked them all, but I do not understand why they are in this topic

[bob3160]

I blocked them all, but I do not understand why they are in this topic

You aren't alone.

[apollorules]

https://www.combank.net/

https://www.commercialbk.com/online/2/2/22001.aspx

https://www.ebank.peoplesbank.lk/

[REDACTED]

In france: http://www.mutec-shs.fr

[REDACTED]

Online bank in Denmark:
https://www.ekspresbank.dk/

Online bank in Norway:
https://www.ekspressbank.no/

[Aditza]

sorry to dig up an old thread BUT Avast has started to block all online banking to https://ib.btrl.ro (Banca Transilvania online banking)

Virustotal apparently lists the bank's site as "phishing" with 1/65 detection ratio - listed by "CLEAN MX".. so i assume that the false phishing score was used by Avast?

https://www.virustotal.com/#/url/52fdcece228a1eda9733955fea9f37c8b9667f16900f85c8b9707d583cf21ab1/detection

I have HTTPS scanning turned off in Avast settings - so it apparently only relies on site reputation when doing HTTPS scanning, and now it's blocking the wrong thing.

I can access the site only if i disable the Avast shields (second screenshot)... not really recommended tho xD

The site certificate is
https://crt.sh/?id=663397960 (transparency pre-cert)
https://crt.sh/?id=744419714

Code: [Select]

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:56:2c:fb:95:88:d2:a8:e9:d2:a8:f9:cb:1a:c2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: (CA ID: 1399)
            commonName                = DigiCert SHA2 Extended Validation Server CA
            organizationalUnitName    = www.digicert.com
            organizationName          = DigiCert Inc
            countryName               = US
        Validity
            Not Before: Aug 22 00:00:00 2018 GMT
            Not After : Oct 21 12:00:00 2019 GMT
        Subject:
            commonName                = ib.btrl.ro
            organizationalUnitName    = BANCA TRANSILVANIA S.A.
            organizationName          = Banca Transilvania SA
            localityName              = Cluj-Napoca
            countryName               = RO
            serialNumber              = J12/4155/1993
            jurisdictionCountryName   = RO
            businessCategory          = Private Organization


[savcin]

This should be already fixed.