ibank[.]lucrativetrustb[.]com

ibank.lucrativetrustb.com is observed hosting a site titled “Lucrative Trust Bank”. The domain was registered on 21 February 2026 through Global Domain Group LLC and resolves to the Hetzner‑hosted address 78.46.40.242 (AS24940, Germany). The web server presents a valid Let’s Encrypt R13 TLS certificate and returns HTTP 200 over both HTTP/1.1 and HTTP/3, indicating an actively reachable service. Automated scans on VirusTotal show that three of ninety‑three security engines flagged the domain, suggesting the presence of malicious components despite the relatively low detection count. The site is listed on one public phishing blocklist and is actively blocked by the PhishDestroy mitigation service, reinforcing the classification of the host as a phishing vector.

Infrastructure analysis reveals a typical PHP‑based stack augmented with Bootstrap, jQuery, Popper, OWL Carousel, LiteSpeed web server, and embedded YouTube content. The name servers dns1‑dns4.lytehosting.com are consistently associated with the hosting provider, confirming that the attacker is exploiting a standard commercial hosting environment. Gridinsoft assigns a trust score of 0 / 100, indicating a complete lack of reputation. No additional intelligence such as Safe Browsing, OTX, or brand‑specific imitation details is available; the exact content of the landing page beyond the title has not been analyzed.

Given the combination of recent domain creation, active TLS, low‑trust score, detection by multiple security vendors, and inclusion on phishing blocklists, the domain should be treated as a high‑confidence banking phishing site. Defensive actions include immediately adding the domain and its IP address to network blocklists, configuring URL filtering to drop HTTP/HTTPS requests to the host, and monitoring DNS queries for the associated name servers.