# PhishDestroy domain threat record: cascadetrustbank.online Content language: English Canonical HTML report: https://phishdestroy.io/domain/cascadetrustbank.online/ Machine-readable companion: https://phishdestroy.io/domain/cascadetrustbank.online/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 20:00:15 UTC - Last availability or vendor check: 2026-10-23 20:01:47 UTC - Stored record updated: 2026-10-23 22:10:05 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: adobe ## Stored infrastructure - Observed IP address: 173.225.109.155 - Registrar in stored WHOIS data: Spaceship, Inc. - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date (registry RDAP, cascadetrustbank.online): 2026-08-29 20:19:11 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16a59-d0e1-747f-979e-c8e70951aa5e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/cascadetrustbank.online - Certificate Transparency search: https://crt.sh/?q=%25.cascadetrustbank.online - Web Archive lookup: https://web.archive.org/web/*/https://cascadetrustbank.online/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI classified the site as malicious because it impersonates a bank and hosts an online banking login form, a classic credential‑phishing pattern. The recorded page title advertises “Cascade Trust Bank – Banking Experience Redefined,” but the domain “cascadetrustbank.online” is not associated with any legitimate financial institution. The domain was first seen by PhishDestroy on 2026-10-23, 55 days after its registration on 2026-08-29, and an HTTP 200 response was recorded on that date. How the scam works In a bank credential‑phishing campaign, attackers create a replica of a bank’s login portal, lure victims with familiar branding and promises of secure services, and capture entered usernames and passwords. The harvested credentials can be used to access real accounts, sold on underground markets, or leveraged for further fraud. Evidence VirusTotal scanned the domain on 2026-10-09 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked the URL on 2026-10-23 and did not flag it. URLScan captured the site on 2026-10-23; its engine analysis gave a malicious score of 99 and applied phishing‑related tags, while the overall verdict was recorded as clean. OTX listed two pulses referencing the domain on 2026-10-23. PhishDestroy’s internal blocklist marks the domain as malicious, and external blocklists returned no hits on the same date. Infrastructure The domain was registered with Spaceship, Inc. on 2026-08-29 and uses the nameservers vda8400a.trouble-free.net and vda8400b.trouble-free.net. Hosting is provided from IP 173.225.109.155, belonging to Interserver, Inc. in the United States. The site presented a Let’s Encrypt TLS certificate valid from 2026-09-27 to 2026-12-26, with SAN entries for *.cascadetrustbank.online and cascadetrustbank.online. What to do Visitors should not enter any credentials on the site; if they have already done so, they should change passwords with the legitimate bank and monitor account activity. Organizations should block the exact domain at the network perimeter, add it to threat‑intel feeds, and review web server logs for POST requests to the login form, treating any captured credentials as compromised. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16a59-d0e1-747f-979e-c8e70951aa5e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/e40c8e59-7a28-4b9b-be62-778dba4cf6c1 URLQuery report: https://urlquery.net/report/da71582a-937c-4cce-97ff-a121623d8aab Stored capture screenshot: https://i.ibb.co/Z6mncKxs/7a86150caa32.png Cloudflare Radar screenshot (2026-10-23T20:00:43Z): https://screenshots.phishdestroy.io/cf/e40c8e59-7a28-4b9b-be62-778dba4cf6c1.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/da71582a-937c-4cce-97ff-a121623d8aab.png URLScan screenshot (2026-10-02T03:21:02Z): https://screenshots.phishdestroy.io/us/01a0faa0-fd42-70fa-a17a-0f002b5e02b4.png URLScan capture report: https://urlscan.io/result/01a0faa0-fd42-70fa-a17a-0f002b5e02b4/ URLScan screenshot (2026-10-06T13:11:02Z): https://screenshots.phishdestroy.io/us/01a11156-a47b-7671-b833-edb359d4e704.png URLScan capture report: https://urlscan.io/result/01a11156-a47b-7671-b833-edb359d4e704/ URLScan screenshot (2026-10-10T21:15:49Z): https://screenshots.phishdestroy.io/us/01a127ab-e90a-77c1-8897-0adcf6918ba4.png URLScan capture report: https://urlscan.io/result/01a127ab-e90a-77c1-8897-0adcf6918ba4/ URLScan screenshot (2026-10-15T08:28:58Z): https://screenshots.phishdestroy.io/us/01a13ead-a55b-73f8-b654-ef5bc2b1ed4c.png URLScan capture report: https://urlscan.io/result/01a13ead-a55b-73f8-b654-ef5bc2b1ed4c/ URLScan screenshot (2026-10-19T16:28:02Z): https://screenshots.phishdestroy.io/us/01a154fd-addc-72ea-ac8b-bc750f4044c5.png URLScan capture report: https://urlscan.io/result/01a154fd-addc-72ea-ac8b-bc750f4044c5/ URLScan screenshot (2026-10-23T20:06:15Z): https://screenshots.phishdestroy.io/us/01a16a5e-e3c3-72fb-92c6-31463a3b93ce.png URLScan capture report: https://urlscan.io/result/01a16a5e-e3c3-72fb-92c6-31463a3b93ce/ VirusTotal report: https://www.virustotal.com/gui/domain/cascadetrustbank.online Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=cascadetrustbank.online Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 20:37:20 UTC ## Stored page captures - Primary capture: https://i.ibb.co/Z6mncKxs/7a86150caa32.png Captured: 2026-10-23 20:01:47 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a16a59-d0e1-747f-979e-c8e70951aa5e.png Captured: 2026-10-23 20:01:47 UTC Source report: https://urlscan.io/result/01a16a59-d0e1-747f-979e-c8e70951aa5e/ - URLScan capture 2: https://urlscan.io/screenshots/01a16992-44c1-712b-9c64-0dc611d8c5dd.png Captured: 2026-10-23 20:00:15 UTC Source report: https://urlscan.io/result/01a16a59-d0e1-747f-979e-c8e70951aa5e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e40c8e59-7a28-4b9b-be62-778dba4cf6c1.png Captured: 2026-10-23 20:00:43 UTC Source report: https://radar.cloudflare.com/scan/e40c8e59-7a28-4b9b-be62-778dba4cf6c1 SHA-256: 6b510bb05b466a4d68c4da794ea6d9c8a987dbce565a72027a9c0d1b79023d05 - URLQuery: https://screenshots.phishdestroy.io/uq/da71582a-937c-4cce-97ff-a121623d8aab.png Source report: https://urlquery.net/report/da71582a-937c-4cce-97ff-a121623d8aab SHA-256: ae2308806122f7b825dc771c544de921a48c07cd48aa89d732079e9e543d3247 - URLScan · 2026-10-02: https://screenshots.phishdestroy.io/us/01a0faa0-fd42-70fa-a17a-0f002b5e02b4.png Captured: 2026-10-02 03:21:02 UTC Source report: https://urlscan.io/result/01a0faa0-fd42-70fa-a17a-0f002b5e02b4/ SHA-256: a0ffdf820aff62ac9386f4e25a6a686e1b17038d1f2f7f6c402cefa4aff7dce4 - URLScan · 2026-10-06: https://screenshots.phishdestroy.io/us/01a11156-a47b-7671-b833-edb359d4e704.png Captured: 2026-10-06 13:11:02 UTC Source report: https://urlscan.io/result/01a11156-a47b-7671-b833-edb359d4e704/ SHA-256: 113137a9c6ca0d878a37753696277f35a82484128f76f5f6345a2b3d8130337c - URLScan · 2026-10-10: https://screenshots.phishdestroy.io/us/01a127ab-e90a-77c1-8897-0adcf6918ba4.png Captured: 2026-10-10 21:15:49 UTC Source report: https://urlscan.io/result/01a127ab-e90a-77c1-8897-0adcf6918ba4/ SHA-256: 69b4245fac7ef367329d166f20b78e4fc458f3c4fadc102814b328d6c42e7a66 - URLScan · 2026-10-15: https://screenshots.phishdestroy.io/us/01a13ead-a55b-73f8-b654-ef5bc2b1ed4c.png Captured: 2026-10-15 08:28:58 UTC Source report: https://urlscan.io/result/01a13ead-a55b-73f8-b654-ef5bc2b1ed4c/ SHA-256: c9f2e7e91f05c656332d973cd374c4c6b9b6f6490435c415ad72fff6a1ab73d2 - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a154fd-addc-72ea-ac8b-bc750f4044c5.png Captured: 2026-10-19 16:28:02 UTC Source report: https://urlscan.io/result/01a154fd-addc-72ea-ac8b-bc750f4044c5/ SHA-256: 2b220c194ceadffcf4ac9280abdf5d283106c144f859d275b837efbf6997b316 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16a5e-e3c3-72fb-92c6-31463a3b93ce.png Captured: 2026-10-23 20:06:15 UTC Source report: https://urlscan.io/result/01a16a5e-e3c3-72fb-92c6-31463a3b93ce/ SHA-256: 78f8479cb4ff35999e29e2eea5e9a3cd75efea0a9e9792cbde89db35caf26063 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T20:36:31Z", "uuid": "01a16a59-d0e1-747f-979e-c8e70951aa5e", "scanned_at": "2026-10-23T20:00:42Z", "final_url": "https://cascadetrustbank.online/", "status": 200, "ip": "173.225.109.155", "ptr": "vda8400b.trouble-free.net", "domains": [ "cdnjs.cloudflare.com", "fonts.googleapis.com", "cdn.gtranslate.net", "fonts.gstatic.com", "bootstrap.smartsuppchat.com", "www.smartsuppchat.com" ], "ips": [ "142.251.14.94", "2a00:1450:4001:c25::5f", "18.184.200.240", "2a02:6ea0:c700::101", "2606:4700:20::681a:c2a", "104.17.25.14", "173.225.109.155" ], "asns": [ "15169", "16509", "60068", "13335", "19318" ], "countries": [ "US", "DE" ], "link_domains": [ "get.adobe.com" ], "doc_hash": "fd92f6a0eb3bbf3a456a93f7bdbf7bd3c9b9213e0c26c3816f24f5a7cf976d98", "script_hashes": [ "fe2475737d49d641f045d416a315f420b4fa9d6f2cb3dabafd8b0d3f7b074a76", "b64f4ad2c2df61041d013d0731a73989729f3798c6c72507671c467809f4800a", "e620af9ee0c0ef4f754f8b3110917149b7d0e97e206412ba08cc3b0a9521ba07", "5af414ed60d1b0dd35d3d8f627926164f81096ee16be45660c7b95f3021ff562", "ee8d01c9e2150502da02d37e03529b27d62171f3c3e2d87053f85180f04af5ee", "d5eebaae17d55b772ab352980e1f0e373019a8ad10ba9a08573e274161838707", "8bb1ea2b5e671bce0262c8d6f51ff0c9caa27e6705812895317e5ab667332d79", "4e35284440cd4eb37e245a565b4fff418728b19fb5923b559d0fbbbf57af3358", "e8422cfb91f106239caca28c3dc7cc288df0124db4eccda82d00c0612cb6f84a", "11dfc4e2e7028a4b2df215fe529daba8fc49ea79d6d059a38a445465812a93b5" ], "globals": [ "d", "year", "gtranslateSettings", "$", "jQuery", "jQuery110108954697368765697", "_smartsupp", "smartsupp", "doGTranslate", "SMARTSUPP_LOADED", "$smartsupp", "_toConsumableArray", "createCookie", "readCookie", "eraseCookie", "getScreenSize", "setTableScrolling", "toTop", "doLoginRefresh", "pageHeightAdjuster", "bootbox", "_slice", "banno", "defaultDisclaimerMessage", "desktopDisclaimerMessage", "mobileDisclaimerMessage", "emailDisclaimerMessage", "desktopEmailDisclaimerMessage", "mobileEmailDisclaimerMessage", "appended", "ParsleyExtend", "ParsleyConfig", "psly", "Parsley", "ParsleyUtils", "ParsleyValidator", "ParsleyUI", "parsley", "Modernizr", "yepnope" ], "cookies": [ "PHPSESSID" ], "storage_keys": [ "modernizr" ], "tls": { "san": [ "*.cascadetrustbank.online", "cascadetrustbank.online" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "*.cascadetrustbank.online", "protocol": "TLS 1.3", "valid_to": "2026-12-26T01:05:07Z", "valid_from": "2026-09-27T01:05:08Z" }, "domain_age_days": 1180, "apex_age_days": 1180, "tls_age_days": 26, "tls_valid_days": 89, "requests": 111, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T20:01:10Z", "uuid": "e40c8e59-7a28-4b9b-be62-778dba4cf6c1", "scanned_at": "2026-10-23T20:00:43Z", "final_url": "https://cascadetrustbank.online/", "status": 200, "history": [ { "url": "https://cascadetrustbank.online/", "status": 200 } ], "dom_hash": "d3b0c18fe3cb93650a6b55841b27f9b650d6678c40d65ec8784e8b2525172331", "doc_hash": "136a727fb2627c4d1a7f91f1fd1fa90aab366a46ff8fc9fa5eadb38429efbbd3", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "cascadetrustbank.online", "type": "A", "value": "173.225.109.155" } ], "dnssec_valid": false, "ip": "173.225.109.155", "whois": { "registrar": "Spaceship, Inc.", "created": "2026-08-29T20:19:11Z", "updated": "2026-09-26T23:04:55Z", "expires": "2027-08-29T20:19:11Z", "nameservers": [ "vda8400a.trouble-free.net", "vda8400b.trouble-free.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T20:34:05Z", "analysis_at": "2026-10-09T14:35:18Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 0, "suspicious": 0, "undetected": 36 }, "reputation": 0, "registrar": "Spaceship, Inc.", "created": "2026-08-29T20:19:11Z", "expires": "2027-08-29T20:19:11Z", "updated": "2026-09-26T23:04:55Z", "first_seen": "2023-11-07T00:20:02Z", "dns": [ { "ttl": 3600, "type": "A", "value": "173.225.109.155" }, { "ttl": 3600, "type": "MX", "value": "mail.cascadetrustbank.online", "priority": 10 }, { "ttl": 3600, "type": "NS", "value": "vda8400a.trouble-free.net" }, { "ttl": 3600, "type": "TXT", "value": "v=spf1 a mx ip4:173.225.109.154 include:relay.mailbaby.net ~all" }, { "ttl": 3600, "type": "SOA", "rname": "hostmaster.cascadetrustbank.online", "value": "vda8400a.trouble-free.net" }, { "ttl": 3600, "type": "NS", "value": "vda8400b.trouble-free.net" } ], "dns_at": "2026-10-09T14:35:44Z", "jarm": "27d27d27d00027d00042d43d00041dba951fb796b4b956c9799ba19149e94a", "cert": { "san": [ "*.cascadetrustbank.online", "cascadetrustbank.online" ], "issuer": "Let's Encrypt / YE2", "serial": "60a372722484d6f9e9bcdbe8992eb8dced4", "sha256": "70c055fa613d3e4d4f87c8b04a05e3b86930ff50d6a04518e31da73444506828", "subject": "*.cascadetrustbank.online", "valid_to": "2026-12-26T01:05:07Z", "valid_from": "2026-09-27T01:05:08Z" }, "whois": { "registrar": "Spaceship, Inc.", "registrar_iana_id": "3862", "registrar_url": "https://www.spaceship.com/", "created": "2026-08-29T20:19:11Z", "updated": "2026-09-26T23:04:55Z", "expires": "2027-08-29T20:19:11Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "vda8400a.trouble-free.net", "vda8400b.trouble-free.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-09-26T23:04:55Z", "registration": "2026-08-29T20:19:11Z", "registrar expiration": "2027-08-29T20:19:11Z", "last update of RDAP database": "2026-10-09T14:35:44Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T20:01:29Z", "mail_config": { "mx": [ "mail.cascadetrustbank.online" ], "spf": "v=spf1 a mx ip4:173.225.109.154 include:relay.mailbaby.net ~all", "spf_lookups": 5 }, "caa_records": { "domain": "cascadetrustbank.online" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2024-05-30T21:23:15Z", "first": "2024-05-30T21:23:15Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 672 }, "social_tags": { "ogUrl": "https://cascadetrustbank.online", "title": "Cascade Trust Bank - Banking Experience Redefined", "ogType": "website", "ogImage": "/app/uploads/settings/website_opengraph_1790465413_9741.png", "ogTitle": "Cascade Trust Bank - Banking Experience Redefined", "keywords": "Cascade Trust Bank, secure banking services, personal banking, business accounts, loans, investment opportunities, financial needs, convenience, reliability, Cascade Trust, CascadeTrust , Cascade Trust, CascadeTrust , Cascade Trust online banking, online banking, Cascade Trust Bank, Banking services", "description": "Cascade Trust Bank offers a wide range of secure banking services tailored to meet your financial needs. Whether you're looking for personal banking solutions, business accounts, loans, or investment opportunities, our experienced team is here to assist you. Discover the convenience and reliability", "ogDescription": "Cascade Trust Bank offers a wide range of secure banking services tailored to meet your financial needs. Whether you're looking for personal banking solutions, business accounts, loans, or investment opportunities, our experienced team is here to assist you. Discover the convenience and reliability" }, "trackers": { "requests": 107, "trackers": [ { "name": "Smartsupp Chat", "company": "Smartsuppp", "country": "CZ", "category": "Customer Interaction", "requests": 2 }, { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 4 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://cdn.gtranslate.net/widgets/latest/dwf.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 109, "tls": 98, "wait": 111, "connect": 91, "download": 90 }, "response_ms": 499 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 25, 53, 80, 110, 143, 443, 587, 993, 995 ] }, "carbon": { "bytes": 33313, "co2_grams": 0.0012, "cleaner_than": 46 }, "dns_server": { "ns": [ { "ip": "173.225.109.154", "host": "vda8400a.trouble-free.net" }, { "ip": "173.225.109.155", "host": "vda8400b.trouble-free.net" } ], "zone": "cascadetrustbank.online" }, "cookies": { "cookies": [ { "name": "PHPSESSID", "secure": true, "session": true } ] }, "location": { "ip": "173.225.109.155", "asn": "19318", "org": "Interserver, Inc", "city": "Secaucus", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "*.cascadetrustbank.online" }, "dns": { "A": [ "173.225.109.155" ], "MX": [ "{\"exchange\": \"mail.cascadetrustbank.online\", \"priority\": 10}" ], "NS": [ "vda8400a.trouble-free.net", "vda8400b.trouble-free.net" ], "SOA": "{\"nsname\": \"vda8400a.trouble-free.net\", \"hostmaster\": \"hostmaster.cascadetrustbank.online\", \"serial\": 2026092606, \"refresh\": 3600, \"retry\": 3600, \"expire\": 1209600, \"minttl\": 1800}", "TXT": [ "v=spf1 a mx ip4:173.225.109.154 include:relay.mailbaby.net ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "173.225.109.155", "family": 4 }, "redirects": { "chain": [ "https://cascadetrustbank.online" ] }, "linked_pages": { "external": [ "http://get.adobe.com/reader/" ], "external_count": 1, "internal_count": 39 }, "whois": { "registrar": "Spaceship, Inc.", "created": "2026-08-29T20:19:11Z", "updated": "2026-09-26T23:04:55Z", "expires": "2027-08-29T20:19:11Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "vda8400a.trouble-free.net", "vda8400b.trouble-free.net" ] }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8" } } } } ```