venezabank[.]com

This domain, venezabank.com, is identified as a banking phishing infrastructure targeting financial service users. Analysis indicates no legitimate affiliation with any known banking institution; the page title 'Lovable App' suggests an attempt to disguise malicious intent under a benign label. The domain appears designed to harvest login credentials, likely through a credential-harvesting kit, though no specific drainer framework was conclusively identified in the available telemetry. Infrastructure analysis reveals venezabank.com resolves to the IP address 89.163.155.33 and was registered through NiceNIC International Group Co., Limited on February 21, 2026. The domain is flagged by 3 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It employs a Let's Encrypt SSL certificate and uses Nginx with HSTS and HTTP/3 protocols. The domain appears on one security blocklist and is actively blocked by PhishDestroy. No detections were recorded in Google Safe Browsing at the time of assessment. As of the latest verification, venezabank.com has been taken offline, reducing immediate exposure risk. However, the infrastructure remains registered and could be reactivated. Users who accessed the domain prior to its takedown should assume credential compromise and initiate password resets on all financial accounts. Organizations are advised to monitor for related indicators, including the IP 89.163.155.33 and the registrar NiceNIC, as part of broader phishing detection efforts. The elevated risk classification persists due to the domain's recent creation date and targeted nature.