colonialinternationalbank[.]com

This report assesses the domain colonialinternationalbank.com, registered on March 11, 2026, through Dynadot LLC. The domain is currently active and resolves to IP address 89.187.25.21, hosted in the Netherlands on AS214036 (Ultahost, Inc.). The site returns an HTTP 200 status and presents the page title 'Digital Online Banking and Best Financial Services - Colonial International Bank'. Analysis from VirusTotal shows 2 of 95 security vendors flag this domain, and it appears on a single security blocklist, with PhishDestroy specifically blocking it. The infrastructure relies on nameservers ns1.ultahost.com through ns4.ultahost.com, and the SSL certificate is issued by Let's Encrypt (R13). The Gridinsoft trust score is 0/100, indicating a high-risk classification. The threat type is banking phishing, and the scam type is listed as Banking Phishing, directly targeting users seeking online financial services from Colonial International Bank. Technologies detected include Zoho, Bootstrap, LiteSpeed, Smartsupp, OWL Carousel, jQuery, Popper, and HTTP/3. Defenders should block access to this domain and its IP address, monitor for related subdomains or similar registrations under Dynadot LLC, and alert users to avoid entering credentials or personal information on this site. The domain remains active as of the report date, July 12, 2026, and continued monitoring is advised.