republictrustbn[.]com

Analysis indicates that republictrustbn.com is an active phishing domain targeting users of Republic Trust Bank. The domain was registered through Global Domain Group LLC and currently resolves to IP address 163.61.188.7, hosted in the United States under an MIT-associated network. The page title explicitly presents itself as 'Republic Trust Bank,' suggesting an intent to impersonate the legitimate financial institution. Infrastructure analysis reveals the domain uses four nameservers (dns1.lytehosting.com through dns4.lytehosting.com) and has a single MX record pointing to itself, a configuration often observed in credential-harvesting campaigns. The domain is flagged by 17 of 91 security vendors on VirusTotal and appears in two AlienVault OTX threat intelligence pulses, confirming detection by multiple independent sources. It is also listed on one security blocklist and is actively blocked by PhishDestroy. The SSL certificate, issued by Let's Encrypt (YR1), does not mitigate the risk, as phishing sites commonly use valid certificates to appear legitimate. As of July 19, 2026, the domain remains active with an HTTP 200 status, indicating ongoing malicious operations. Defenders should treat this domain as high-risk and implement blocking at the DNS, proxy, or firewall level. No evidence currently confirms the specific phishing kit or exact user interaction flow, but the combination of brand impersonation, MX self-hosting, and multi-source detection strongly supports classification as a credential-theft operation.