pacifictrustbn[.]com

This domain, pacifictrustbn.com, is identified as a generic phishing site specifically designed to impersonate Pacific Trust Bank. The threat type involves fraudulent credential harvesting through a spoofed banking portal, presenting a direct risk to users who may unknowingly submit sensitive financial information. As of the latest assessment, the domain has been taken offline, though prior activity indicates a deliberate attempt to mimic legitimate banking infrastructure. Analysis indicates the domain was registered on February 21, 2026, through Cosmotown, Inc., and resolves to the IP address 216.244.83.203. It is flagged by 4 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0 out of 100. The domain appears on two security blocklists and is actively blocked by PhishDestroy and OISD. Technical indicators reveal the use of Tailwind CSS, LiteSpeed web server, Alpine.js, Smartsupp analytics, and jsDelivr content delivery, alongside HTTP/3 protocol support. The SSL certificate is issued by Let's Encrypt, a common tactic to lend false legitimacy to phishing sites. The current status of pacifictrustbn.com is offline, though the infrastructure and registration details suggest a coordinated phishing campaign. Users and organizations are advised to block the domain and associated IP address at the network level. Financial institutions should monitor for unauthorized access attempts linked to this domain and educate customers on recognizing phishing indicators. Security teams should treat any prior interaction with this domain as a potential compromise and conduct a thorough review of logs for connections to 216.244.83.203 or related subdomains. Proactive measures include implementing domain-based email filtering and deploying endpoint protection to detect and prevent access to known phishing infrastructure.