carbontradebanks[.]com

The domain carbontradebanks.com is assessed as a high-risk fake login phishing site. Analysis indicates that this domain was specifically designed to mimic legitimate banking websites, enticing users to enter their login credentials and potentially compromising their financial information.

Infrastructure analysis reveals that carbontradebanks.com resolves to the IP address 23.95.190.44, which is located in the United States and is part of the AS36352 HostPapa network. The domain was registered through Spaceship, Inc., on February 21, 2026. Notably, it lacks an SSL certificate, which is a common indicator of a non-secure and potentially malicious site. VirusTotal reports that 14 out of 95 security vendors have flagged this domain as suspicious. Additionally, the domain appears on three security blocklists, including PhishDestroy and SEAL. The current status of the domain is offline, which may indicate that the site has been taken down due to security concerns or is currently dormant.

To mitigate the risks associated with this fake login phishing site, it is recommended that users avoid visiting the domain and immediately report any phishing attempts to their financial institutions. Security teams should monitor for any reactivation of the domain and consider implementing DNS blocking or IP blacklisting to prevent access. Additionally, raising awareness among users about the lack of SSL certificates and the importance of verifying the authenticity of websites can help reduce the likelihood of successful phishing attacks.