trustbank-capital[.]com

This domain, trustbank-capital.com, is flagged as a credential theft operation targeting banking customers. Analysis indicates the site mimics legitimate financial services to harvest login credentials, potentially enabling unauthorized account access or fraudulent transactions. No evidence of a crypto drainer kit was observed, but the infrastructure aligns with credential harvesting campaigns. Technical indicators confirm elevated risk: the domain was registered on April 28, 2026, via Fewmoretaps OU d/b/a Trustname.com. It resolves to IP 188.114.96.3 (CloudFlare, Inc., Canada) and uses a Let's Encrypt SSL certificate (serial E8). Security engines flagged the domain 12/95 on VirusTotal, and it appears on one security blocklist. No Google Safe Browsing (GSB) detection was recorded at the time of analysis. The domain remains active and unremediated, posing an ongoing threat to users. Response actions include blocking via internal security tools, but no public takedown has been observed. Users are advised to avoid interaction, verify financial institution domains directly through official channels, and report suspicious activity to their bank. The remaining risk is elevated due to the domain's operational status and lack of widespread blocklisting.