firstcostaloffshore[.]com

The domain firstcostaloffshore.com is a generic phishing site posing as a fictitious financial institution, 'First Costal Offshore Bank.' It does not impersonate a known legitimate brand but presents itself as an international bank to deceive users into submitting sensitive credentials or personal information. The site has been identified as a government impersonation scam and is currently taken offline, though it previously exhibited elevated risk indicators.

Technical analysis reveals that firstcostaloffshore.com was flagged by 2 of 95 VirusTotal security vendors, including Ermes and Fortinet. The domain was registered on November 15, 2024, through Cosmotown, Inc., and resolved to the IP address 163.61.188.89, hosted under AS153568 (NEW DHAKA HARDWARE) in the US. It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by Let's Encrypt (R13). The observed page title was 'First Costal Offshore Bank -A leading international bank you can trust,' and technologies detected included Bootstrap, LiteSpeed, jQuery, and Smartsupp. Gridinsoft assigned a trust score of 0/100, while Scamadviser rated it 45/100.

Users who interacted with firstcostaloffshore.com should immediately change any credentials entered on the site, enable multi-factor authentication on all financial and sensitive accounts, and monitor for unauthorized transactions or identity theft. Report the domain to local cybercrime authorities, the Federal Trade Commission (FTC) at reportfraud.ftc.gov, and Google Safe Browsing via their reporting tool. If financial data was exposed, contact the relevant institution to secure accounts and consider placing a fraud alert on credit reports.