treldisbank[.]com

As of July 25, 2026, the domain treldisbank.com has been identified as a banking phishing scam. The domain was created on March 11, 2026, and is registered through Ultahost, Inc. It has been taken offline and is currently not resolving to any active web content. The domain previously resolved to the IP address 79.133.41.61, which is located in Germany and associated with AS214036 Ultahost, Inc. The domain's MX records point to treldisbank.com itself, suggesting a potential attempt to intercept email communications. The SSL certificate was issued by Let's Encrypt, a common provider for free certificates that can be used to establish HTTPS connections, which may have been employed to add a false sense of security to the phishing site.

The domain is flagged by PhishDestroy and appears on one security blocklist, indicating recognition of its malicious nature by threat intelligence services. Infrastructure analysis reveals that the domain used several web technologies, including Tailwind CSS, LiteSpeed, Alpine.js, Smartsupp, and jsDelivr, which are often used to create and manage dynamic and responsive web pages. The exact content of the page, as indicated by the page title 'Home - TreldisBank,' suggests a legitimate banking website, but this is likely a facade to deceive visitors.

Defenders should ensure that this domain is blocked in their security systems and monitor for any attempts to revive the phishing infrastructure. Given the elevated risk level, users should be educated to avoid clicking on links or providing personal information to any site purporting to be TreldisBank outside of verified and official channels. Further analysis of related infrastructure and monitoring of the domain's status are recommended to prevent potential future attacks.