interbfacilities[.]online

interbfacilities.online was registered through Namecheap Inc on 11 April 2026. The site resolved to IP 163.61.188.2, which geolocates to the United States and is associated with the MIT network. DNS resolution used four authoritative name servers (dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, dns4.lytehosting.com). The site served an HTTPS certificate issued by Let’s Encrypt (R12) and employed HTTP/3. Technology fingerprints show a PHP backend, Tailwind CSS, LiteSpeed web server, Alpine.js, jsDelivr CDN, and the Chaport live‑chat widget.

The page title returned “Home – International Banking Facilities (IBF)”, suggesting an attempt to impersonate a financial institution. The domain is currently taken offline, and its risk level is marked elevated. Trust scoring services rate the site poorly: Gridinsoft assigns 22/100, Scamadviser assigns 1/100. It appears on one security blocklist and has been blocked by PhishDestroy. VirusTotal scans recorded 2 detections out of 95 participating scanners, confirming malicious behavior.

The limited detection footprint and the lack of additional public intelligence mean that the full phishing campaign details—such as credential‑stealing pages or lure content—remain unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurrection of the IP address, and consider adding the associated IP and name servers to deny lists. Ongoing observation of the Let’s Encrypt certificate renewal and any re‑registration attempts is advised. The combination of low trust scores, confirmed vendor detections, and blocklist inclusion justifies maintaining the elevated risk rating until the infrastructure is fully dismantled.