carriagetrust[.]com

The domain carriagetrust.com has been identified as a brand impersonation phishing site targeting users of a financial institution. Analysis indicates the domain was designed to mimic the legitimate branding of CARRIAGE TRUST BANK, as evidenced by the page title "Home - CARRIAGE TRUST BANK" and the fraudulent infrastructure supporting it. The domain is currently offline, though prior activity suggests it was actively used for credential harvesting or financial fraud schemes. Infrastructure analysis reveals the domain was registered through OwnRegistrar, Inc., on September 12, 2025, and resolved to the IP address 192.3.190.187. Security vendors flagged the domain as malicious, with 12 of 95 VirusTotal engines detecting it as a threat. The domain appears on one security blocklist and holds a Scamadviser trust score of 40 out of 100, further indicating its suspicious nature. Additional technical indicators include its inclusion in the PhishDestroy blocklist, reinforcing its classification as a phishing resource. Given the domain's current offline status, immediate threats to end users are mitigated. However, organizations should monitor for re-emergence or similar domains registered through the same registrar or resolving to the identified IP address. Network defenders are advised to block the domain and associated IP at perimeter defenses, while financial institutions should alert customers to potential impersonation attempts. Historical logs should be reviewed for connections to 192.3.190.187 or interactions with carriagetrust.com to identify compromised accounts or data exposure.