axiom-aa[.]sbs

The domain axiom-aa.sbs has been flagged as a high-risk generic phishing domain. As of July 12, 2026, the domain remains active and is identified by a page title 'Ray Ecommerce Solutions.' Analysis indicates that 15 out of 95 security vendors on VirusTotal have detected malicious activity associated with this domain, suggesting a significant level of suspicion. The domain was created on September 10, 2025, and is registered through GRANSY S.R.O D/B/A SUBREG.CZ, a known domain registrar. The domain's trust score from Gridinsoft is 0 out of 100, and it appears in 23 threat intelligence pulses on AlienVault OTX, further corroborating its dubious nature. The domain is also present on two security blocklists: PhishDestroy and BLP-Malware. Defenders should be aware that the SSL certificate for axiom-aa.sbs is issued by Let's Encrypt, a common choice for phishing sites due to its ease of acquisition. The domain resolves to the IP address 94.154.35.60 and employs Nginx as its web server, with additional security features such as HSTS and HTTP/3. While the exact content of the website has not been analyzed, the combination of low trust scores, multiple threat intelligence flags, and active status on blocklists strongly suggests that axiom-aa.sbs is a phishing site. Security teams are advised to block this domain and monitor for any related malicious activity. The high risk level and ongoing presence on multiple threat lists indicate that users should exercise extreme caution and avoid interacting with this domain to prevent potential credential theft or other forms of cyber exploitation.