rinavandezsavings[.]com

Analysis indicates that www.rinavandezsavings.com was registered on February 21, 2026 through HOSTINGER operations, UAB. The authoritative nameservers are ns1.1buxhosting.com and ns2.1buxhosting.com, and the domain resolves to IP 198.251.88.117, which is announced by AS53667 FranTech Solutions and geolocated to the United States. No TLS certificate is presented, implying HTTP‑only service. The site’s page title, “rinavandezsavings - Your New Favorite Bank”, suggests a generic phishing lure targeting banking credentials.

The domain is currently offline, and it has been taken down from public resolution. Threat intelligence shows the domain is listed on a single security blocklist and was blocked by the PhishDestroy service. VirusTotal scans reported two detections out of ninety‑three vendors, confirming that at least a minority of scanners flagged the site as malicious. No additional evidence such as Safe Browsing or OTX identifiers is available.

Defenders should add the domain and its resolving IP to deny‑list rules, monitor for any re‑registration or resurrection of the host, and enforce TLS inspection policies to capture any residual HTTP traffic. Continuous observation of the registrar HOSTINGER operations, UAB for new registrations resembling this pattern is advised. Given the limited detection count, the activity should be classified as elevated risk until further malicious activity is observed.