Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
citizenspringtrust[.]com
“Citizen Spring Trust- Your New Favorite Bank”
संग्रहीत अवलोकन
देखा गया शीर्षक अंतर
साक्ष्य सारांश
The domain citizenspringtrust.com was registered on February 21, 2026 through Cosmotown, Inc. and currently resolves to the IP address 86.48.22.239, which belongs to AS40021 Contabo Inc. in the United States. HTTP requests return a 200 status code and the site presents a TLS certificate issued by Let’s Encrypt (R13), indicating that encrypted communications are available. The page title retrieved from the host is “Citizen Spring Trust- Your New Favorite Bank,” matching the declared scam type of banking phishing. Infrastructure analysis shows the site is served by the orangehost.com name servers (ns1.orangehost.com, ns2.orangehost.com) and utilizes client‑side libraries including Typekit, Smartsupp, Modernizr, jQuery, and HTTP/3 support.
The domain appears on a single security blocklist and is actively blocked by PhishDestroy, confirming that threat‑intelligence feeds have identified it as malicious. VirusTotal scans report that three of ninety‑five security vendors flag the domain, providing additional corroboration of its malicious nature. No other public reputation services or safe‑browsing lists are referenced in the available data. While the technical footprint is well documented, the content of the landing page has not been examined, leaving uncertainty about the exact phishing workflow, credential collection mechanisms, and any additional payloads that may be delivered.
Defenders should treat the domain as high‑risk and enforce blocking at network perimeter, DNS, and endpoint layers. Continuous monitoring of the associated IP range and the orangehost.com name servers is advised, as the hosting provider may be leveraged for further fraudulent sites. Incident response teams should also consider sharing indicators of compromise, such as the domain name, IP address, and SSL fingerprint, with threat‑sharing communities to improve collective detection.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260219-EE0A83- कैप्चर किए गए पेज का शीर्षक
- Citizen Spring Trust- Your New Favorite Bank
- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain citizenspringtrust.com is engaged in phishing activities, which directly contravenes the AUP's prohibition against illegal activities and fraud.
Terms of Service (TOS): The use of this domain for deceptive practices constitutes a violation of the TOS, which reserves the right to suspend or terminate services for such infractions.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and networks, which is relevant as phishing schemes often involve unauthorized access to user information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities using electronic communications, applicable to phishing activities.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits misleading information, which is often a component of phishing attempts.
Regulatory Note: Failure to take immediate action against this domain may result in liability for facilitating illegal activities and could lead to regulatory scrutiny or penalties. It is imperative to comply with your AUP and TOS to mitigate these risks.
Data Coverage
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
पहचान समयरेखा
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
-
डोमेन स्थिति
पहुँच योग्य → पहुँच योग्य नहीं
-
डोमेन स्थिति
पहुँच योग्य नहीं → पहुँच योग्य
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।