katahdin-u5[.]com

This domain is flagged as an elevated-risk credential harvesting phishing site specifically designed to impersonate financial institutions. Analysis indicates the infrastructure was established to deceive users of banking services, with page content mimicking legitimate banking portals to extract sensitive login credentials and personal financial information. The threat type is confirmed as targeted financial phishing, with a focus on retail and small business banking customers. Infrastructure analysis reveals multiple high-risk indicators. The domain katahdin-u5.com resolves to IP address 188.114.96.3 and was registered through Global Domain Group LLC on April 21, 2026, an anomalous creation date suggesting potential domain spoofing or look-ahead registration. It appears on two security blocklists and is actively blocked by PhishDestroy and OISD. Gridinsoft assigns a trust score of 0/100, while VirusTotal reports 4/95 security vendors flagging the domain as malicious. The site employs Cloudflare for traffic routing and supports HTTP/3, leveraging modern web protocols to evade detection. A Let's Encrypt SSL certificate provides HTTPS encryption, creating a false sense of security for victims. Mitigation requires immediate action from both end users and network administrators. Users who accessed the domain should assume credential compromise and initiate password resets across all financial accounts, enabling multi-factor authentication where available. Network security teams should implement DNS sinkholing for the domain and associated IP address 188.114.96.3, while updating web filtering rules to block both the domain and registrar-identified patterns. Financial institutions should monitor for authentication attempts from the identified IP range and issue fraud alerts to customers who may have interacted with the phishing site. The anomalous 2026 creation date warrants additional scrutiny of domain registration patterns, particularly for domains using similar naming conventions or registrar services.