creditoenlineaecuador-2026-w-23--ecuadorcredire.replit.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of creditoenlineaecuador-2026-w-23--ecuadorcredire.replit.app
This domain appears to host a Spanish-language financial form presented as a credit evaluation or loan pre-qualification page. The page title and visible branding reference Banco Pichincha, and the form requests personal and financial details such as identity number, names, phone number, and monthly income.
Based on the domain structure, however, the page is not hosted on an official standalone banking domain but on a replit.app subdomain. That setup may indicate a temporary or third-party hosted page rather than an official banking property. The content appears designed to resemble a financial-services application workflow aimed at users in Ecuador.
Safety Assessment for creditoenlineaecuador-2026-w-23--ecuadorcredire.replit.app
Multiple independent signals indicate elevated risk at the time of this scan. The domain was flagged by 19 out of 91 security engines, categorized by multiple web-classification providers as phishing or fraud-related, and listed by a major threat database for social-engineering activity. The page also appears to imitate Banco Pichincha branding while operating from an unrelated replit.app subdomain, which may be consistent with credential-harvesting or financial-information theft.
Although the on-page malware scan did not detect malicious files in the limited sample checked, that does not offset the stronger phishing indicators. The site requests sensitive identity and income information, and the mismatch between the displayed bank branding and the hosting domain is a significant concern. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, is served through Google Frontend, and appears to be hosted on Google Cloud infrastructure at IP address 34.117.33.233. DNSSEC is not enabled for the domain, and the nameservers are provided through Google Domains infrastructure.
From a security-assessment perspective, the main concern is not transport encryption but the apparent misuse of a cloud-hosted subdomain to present bank-branded content. Blacklist data shows a social-engineering listing at the time of this scan, while DNS-based mail-reputation checks were clean.
Share your experience with this website. Was it safe? Did you encounter any issues?