backtijara[.]com

The domain backtijara.com is confirmed to be a credential theft site impersonating Eisenberg Bank and is currently offline. The site was designed to trick users into divulging sensitive information such as login credentials, potentially leading to unauthorized access and financial fraud.

Analysis indicates that backtijara.com was flagged by 10 of 95 VirusTotal vendors, indicating a high level of suspicion among security professionals. The domain is registered through OnlineNIC, Inc. and resolves to the IP address 91.202.233.147, which is located in TM and associated with Prospero OOO. The domain was created on April 27, 2026, and has appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The page title 'Eisenberg Bank — Admin' suggests that the site was attempting to impersonate an administrative portal of Eisenberg Bank to gain user trust.

Given the current status of the domain as offline, it is recommended that organizations and individuals continue to monitor for any re-emergence of backtijara.com or similar domains. Additionally, users who may have interacted with this site should immediately change their passwords and enable multi-factor authentication for their Eisenberg Bank accounts. Security teams should update their blocklists and firewalls to ensure that this domain remains inaccessible to network users. Regular security awareness training should also be conducted to educate employees and customers about the risks of credential theft and how to identify and avoid phishing attempts.