caixa-trustbank[.]com

The domain caixa-trustbank.com is currently active and functions as a banking phishing site specifically designed to impersonate CaixaBank, a major financial institution. Analysis indicates the threat type involves credential harvesting through fake login portals, targeting customers of the legitimate CaixaBank service. The domain remains operational as of the latest verification, posing an elevated risk to users who may be deceived into entering sensitive authentication details. Infrastructure analysis reveals the domain was registered on July 04, 2026, through the registrar Gransy, s.r.o. It resolves to the IP address 51.75.84.85, which may host additional malicious content. According to VirusTotal data, 10 of 95 security vendors have flagged this domain as malicious, indicating a moderate level of detection but sufficient evidence of phishing activity. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to fraudulent sites. No additional blocklist entries or trust scores were provided, though the domain's recent creation and association with known phishing infrastructure further corroborate its malicious intent. Current status confirms the domain remains active, and users are advised to exercise extreme caution. Financial institutions and security teams should immediately block the domain and associated IP address within network security controls. End users who may have interacted with this site should reset their credentials via the official CaixaBank portal and enable multi-factor authentication. Monitoring for unauthorized transactions and reporting the domain to relevant cybersecurity organizations is strongly recommended to mitigate further risk.