alliedtrust-capitals[.]com

The domain alliedtrust-capitals.com has been identified as a credential theft operation specifically impersonating Allied Trust Capitals Bank, a legitimate financial institution. Analysis indicates the domain is currently offline, though prior activity suggests it was actively used to harvest login credentials from unsuspecting victims under the guise of a trusted banking entity. Infrastructure analysis reveals the domain was registered on September 02, 2025, through Cosmotown, Inc., and resolved to the IP address 163.61.188.89. Security vendor assessments show 7 of 95 VirusTotal engines flagged the domain as malicious, while it appears on one security blocklist. The page title, "Allied Trust Capitals Bank - A leading international bank you can trust," directly mimics the branding of Allied Trust Capitals, reinforcing its fraudulent intent. Additionally, the domain holds a trust score of 0/100, further confirming its lack of legitimacy. Current status indicates the domain has been taken offline, likely due to enforcement actions or infrastructure changes by the threat actor. However, the risk remains elevated for users who may have interacted with the domain prior to its deactivation. Organizations and individuals are advised to block the domain and associated IP (163.61.188.89) at the network level, reset credentials for any accounts accessed during the domain's active period, and monitor for unauthorized transactions or account activity. Financial institutions should alert customers about this impersonation attempt and provide guidance on verifying legitimate communications.