chaseverify[.]azuuro[.]xyz

Analysis of chaseverify.azuuro.xyz indicates a newly registered domain created on 21 February 2026 that is being used to impersonate Chase in a banking phishing campaign. The page title returned by the host is exactly "chaseverify.azuuro.xyz", which matches the domain and provides no additional context. Gridinsoft assigned a trust score of 0 out of 100, reflecting a complete lack of confidence in the site’s legitimacy. VirusTotal scans have yielded 18 detections out of 93 security vendors, confirming that multiple independent scanners classify the domain as malicious.

The domain is presently taken offline, and the PhishDestroy blocklist has already listed it, confirming that active mitigation actions have been applied. It also appears on a single additional security blocklist, further evidencing its classification as a threat. The intelligence explicitly identifies the campaign as a "Banking Phishing" operation targeting the Chase brand, which aligns with the domain’s naming pattern that incorporates the brand name. No further infrastructure details such as hosting IP, ASN, or SSL certificate information are available in the current dataset.

Because the domain is already blocked by PhishDestroy and listed on public blocklists, defenders should ensure that their network perimeter and endpoint protection solutions continue to deny any resolution or connection attempts to this FQDN. Continuous monitoring of DNS query logs for the exact string "chaseverify.azuuro.xyz" is recommended to detect any resurgence if the actor re‑hosts the payload. Organizations should also incorporate the domain into internal phishing‑filter rules and share the indicator with any threat‑sharing platforms they participate in. Given the low trust score, multiple vendor detections, and confirmed brand impersonation, the risk associated with this domain remains elevated until it is fully eradicated from the threat landscape.