kiwibank.co.nz-personal-banking.kiwibank-nz.cloud-ip.cc
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of kiwibank.co.nz-personal-banking.kiwibank-nz.cloud-ip.cc
This domain appears to present itself as an online banking login page for Kiwibank, using branding and wording such as "Welcome to internet banking" along with fields for an access number and password. Based on the screenshot and domain structure, the page is designed to resemble a financial-services login portal rather than a general informational website.
The hostname is unusually long and places banking-related terms inside a subdomain of cloud-ip.cc rather than on an apparent official Kiwibank-owned domain. That setup may indicate the page is intended to imitate a legitimate banking service while being operated through third-party hosting infrastructure. The site does not appear to provide broader banking content on the captured page; instead, it focuses narrowly on credential entry.
Safety Assessment for kiwibank.co.nz-personal-banking.kiwibank-nz.cloud-ip.cc
Several independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 8 out of 91 security engines, and multiple web-classification providers categorized it as phishing, fraud, or suspicious content. In addition, the screenshot shows a banking login page using Kiwibank branding while the actual domain is a cloud-ip.cc subdomain that closely references Kiwibank in its hostname, which may indicate an attempt to mimic a legitimate financial institution.
Other scan elements were less conclusive: the malware scan did not identify malicious files, and major threat-database checks listed in the scan were clean at the time of review. However, clean file-based results do not outweigh the stronger phishing indicators when a page appears to solicit banking credentials under a look-alike domain structure. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by ZeroSSL and expiring in December 2026. It appears to be hosted on AWS EC2 infrastructure in Sydney, Australia, using the IP address 16.176.131.110. The web server software and supported protocol details were not identified in the scan output.
From a domain-security perspective, DNSSEC appears to be unsigned, which means DNS responses may have less authenticity protection than signed domains. The domain is relatively new at about 400 days old, has no observed traffic ranking in the provided data, and uses a multi-level hostname structure on cloud-ip.cc that may be inconsistent with how established banks typically host customer login portals.
Share your experience with this website. Was it safe? Did you encounter any issues?