bancatlan-hn[.]com

Analysis on the domain bancatlan-hn.com indicates an active brand‑impersonation campaign targeting Chase customers. The domain was registered on 21 February 2026 and, as of the report date 23 July 2026, is taken offline. Infrastructure assessment shows the domain resolves to IP 47.253.245.2, which belongs to AS45102 – Alibaba (US) Technology Co., Ltd., located in the United States. The SSL certificate associated with the host is rated “E7,” suggesting a low‑trust certificate that may be self‑signed or otherwise weak.

Reputation data reveals the domain appears on one public security blocklist and is blocked by the PhishDestroy service. VirusTotal has recorded detections from 13 of 93 scanning engines, confirming that multiple vendors have flagged the site as malicious. The page title returned from the site – “Credit Card, Mortgage, Banking, Auto | Chase Online | Chase.com” – directly aligns with the advertised brand target, Chase, reinforcing the impersonation intent.

No additional evidence such as page content snapshots, registrar details, or Safe Browsing hashes are available, leaving the exact malicious payload or credential‑harvesting mechanisms uncertain. Defenders should continue to block the domain and associated IP at perimeter defenses, update threat‑intel feeds with the observed indicators, and monitor for reuse of the same IP range or similar SSL characteristics. Network analysts are advised to query historical DNS records for potential resurgence and to watch for new domains registered with comparable naming patterns that reference Chase or banking services.