credifyonlinebnk[.]com[.]capitaltrusts-inc[.]com

The domain www.credifyonlinebnk.com.capitaltrusts-inc.com was registered on February 21, 2026 through Cosmotown, Inc. and currently resolves to the IPv4 address 198.251.88.6, which is announced by AS53667 FranTech Solutions in the United States. The authoritative name servers are ns1.asurahosting.com and ns2.asurahosting.com. An active TLS certificate issued by Let’s Encrypt (R12) is presented, and the web server returns HTTP 200 for the root path, delivering a page whose title is “Home – Credify”. The site is built with Tailwind CSS, LiteSpeed, Alpine.js, jsDelivr and supports HTTP/3.

Reputation checks show the domain appears on one security blocklist and has a Gridinsoft trust score of 0 out of 100, indicating extreme distrust. VirusTotal analysis flags the domain in 7 of 93 scanned security vendors, reinforcing the malicious assessment. PhishDestroy has also listed the domain as blocked. No additional public intelligence such as Safe Browsing or OTX entries is available.

Given the combination of a recent registration, low‑reputation hosting, active TLS, a generic “Home – Credify” title, and multiple vendor detections, the domain is classified as a high‑risk generic phishing infrastructure. Defenders should add the IP address 198.251.88.6 to deny‑list rules, monitor DNS queries for the sub‑domain pattern *.credifyonlinebnk.com.capitaltrusts-inc.com, and ensure that web‑proxy or gateway solutions block HTTP/3 traffic to this host. Continuous re‑scanning on VirusTotal and checking for updates to the blocklist that currently contains the domain are recommended. Because the underlying content has not been publicly dissected, analysts should treat any credential‑capture pages hosted under this domain as potentially malicious and advise users to avoid interaction.