seacoastbank[.]credit

The domain seacoastbank.credit is presently active and hosts a credential phishing site identified by the page title "seacoast bank login — Official seacoast bank login Site." Infrastructure analysis shows the domain resolves to IP 107.189.26.168, a server located in the Netherlands and associated with AS14956 RouterHosting LLC. The hosting provider is listed as Hosting Concepts B.V. d/b/a Registrar.eu, and the domain was registered on June 12, 2026. Technical fingerprints reveal a PHP application served behind Nginx with HTTP Strict Transport Security enabled, and the site uses a Let’s Encrypt YR1 certificate, returning HTTP 200 for requests. Reputation data is poor: Gridinsoft assigns a trust score of 0/100, Google Safe Browsing flags the domain for SOCIAL_ENGINEERING, and VirusTotal reports 12 of 91 security vendors flagging the site. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Nameservers a.dnspod.com, b.dnspod.com, and c.dnspod.com resolve the domain, indicating use of a public DNS service. While the page content has not been directly inspected, the convergence of phishing indicators, low trust scores, and multiple blocklist entries suggests a high‑risk credential harvesting operation targeting Seacoast Bank customers. Defenders should block the domain at network perimeter and endpoint layers, monitor DNS queries for the associated nameservers, and educate users about the fraudulent login page. Continued observation is recommended to capture any changes in hosting or payload delivery.