deltabank[.]eu[.]com

The domain deltabank.eu.com was observed on a security blocklist (one listing) and is currently blocked by PhishDestroy. It was submitted to VirusTotal where 91 anti‑malware engines evaluated the site; at the time of analysis none reported malicious behavior, but the lack of detections does not guarantee that the content is benign. The domain is classified as a banking‑phishing vector targeting customers of Delta Bank, based on its naming pattern and the threat type supplied. No public WHOIS, hosting, or SSL certificate data has been released in the available intelligence, so infrastructure details remain unknown.

The site’s HTTP response, page title, and any brand‑specific cues have not been captured, limiting the ability to confirm the exact phishing landing page. Operational status is marked as active, and the risk level is listed as under investigation, indicating that further monitoring is required. Defenders should continue to block the domain at perimeter and DNS layers, add it to internal blocklists, and monitor for any newly observed C2 infrastructure or credential‑harvesting activity linked to the domain.

Continuous re‑scanning on VirusTotal and other multi‑engine services is advised, as additional detections may emerge. Incident response teams should treat any credentials submitted to the domain as potentially compromised and advise affected users to reset passwords and review account activity. The presence on a known blocklist and the specific phishing classification suggest a credible threat, even though current automated scans have not raised alerts.