pinnacletbk[.]com

This domain, pinnacletbk.com, is identified as a credential theft operation designed to harvest banking login credentials through deceptive web pages. Analysis indicates the site mimics financial institution interfaces, tricking users into entering sensitive account details under false pretenses. The domain’s infrastructure and page structure align with known credential harvesting campaigns targeting retail banking customers, particularly those using mobile or online banking platforms.

Infrastructure analysis reveals multiple indicators of malicious activity. The domain resolves to IP address 198.251.89.144 (AS53667, FranTech Solutions) and is flagged by 10 out of 95 security vendors on VirusTotal. It appears on one security blocklist and was registered through Global Domain Group LLC on February 21, 2026, an unusually future-dated creation that deviates from standard registration patterns. The SSL certificate, issued by Let’s Encrypt (R13), provides minimal assurance, as the domain’s content fails to load, displaying only a 'Problem loading page' error—a common evasion tactic.

Users who visited pinnacletbk.com should assume potential exposure of login credentials. Immediate actions include resetting passwords for any accounts accessed after visiting the domain, enabling multi-factor authentication where available, and monitoring financial statements for unauthorized transactions. Network administrators should block the domain and its associated IP (198.251.89.144) at the firewall or proxy level. If browser sessions were active during the visit, clearing cached data and running a full antivirus scan is recommended to detect any residual threats.