silvertontrustbank[.]live

This domain, silvertontrustbank.live, is identified as a banking phishing site designed to impersonate Silverton Trust, a financial institution. Analysis indicates the site presents a fraudulent login portal to harvest user credentials, specifically targeting customers of the legitimate Silverton Trust brand. No crypto drainer or known phishing kit signatures were detected in the initial scan, but the domain exhibits characteristics consistent with credential theft infrastructure, including the use of obfuscated JavaScript and third-party CDN resources. Infrastructure analysis reveals the domain was registered on May 22, 2026, through Dynadot Inc, an anomaly given the future date, suggesting potential domain spoofing or registry manipulation. It resolves to the IP address 198.251.84.200 and employs a Let's Encrypt SSL certificate for HTTPS encryption. VirusTotal reports 17 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 1 out of 100. The domain appears on one security blocklist and is blocked by PhishDestroy. Technologies detected include Tailwind CSS, LiteSpeed, Alpine.js, Smartsupp, and jsDelivr, which may be leveraged to enhance the site's legitimacy or facilitate malicious activity. As of the latest assessment, silvertontrustbank.live has been taken offline, likely due to hosting provider intervention or registrar enforcement. However, residual risk remains due to the domain's recent registration anomaly and the potential for re-deployment under a new IP or registrar. Users who accessed the site prior to takedown should assume credential compromise and initiate password resets for all associated financial accounts. Organizations are advised to monitor for similar domains registered via Dynadot or resolving to 198.251.84.200, as this infrastructure may be reused for future phishing campaigns.