conradpbukonline[.]com

This domain, conradpbukonline.com, presents a high-risk credential theft threat targeting users of CONRAD Private Bank. The site displays a login interface designed to harvest account credentials, including usernames, passwords, and potentially multi-factor authentication codes. Visitors are likely lured through phishing emails or malicious advertisements claiming urgent account verification or security updates, a common tactic in financial fraud operations. Analysis indicates the domain was registered on January 21, 2026, through Shock Hosting LLC, an uncommon registrar for legitimate banking entities. It resolves to 194.36.191.196, an IP address hosted in the Netherlands under AS60117 (Host Sailor Ltd), a network frequently associated with malicious infrastructure. The site uses a Let's Encrypt SSL certificate (R13), providing a false sense of security. Only 1 of 95 security vendors on VirusTotal currently flags this domain, suggesting limited detection at present despite its active status on one security blocklist. If you visited conradpbukonline.com or entered any credentials, immediately cease all interaction with the site. Reset passwords for any accounts accessed through the domain, prioritizing financial and email accounts. Enable multi-factor authentication where available. Monitor linked accounts for unauthorized transactions or login attempts, and report the incident to your financial institution. Do not respond to any follow-up communications claiming to be from CONRAD Private Bank, as these may be additional phishing attempts. Consider scanning your device for malware, as credential theft sites occasionally deploy malicious payloads.