counteeglobalbnk[.]com

The domain counteeglobalbnk.com is identified as a brand impersonation threat targeting Across Bank, a recognized financial institution. Analysis confirms the domain was actively used to deceive users by mimicking the bank’s official branding, including logos, page layout, and service terminology. Current status indicates the domain has been taken offline, though prior activity suggests it was operational for credential harvesting or fraudulent transaction facilitation. Technical indicators reveal the domain was registered on May 23, 2025, through Atak Domain and resolved to the IP address 86.107.77.165. Security vendors flagged the domain in 12 of 95 VirusTotal scans, while Gridinsoft assigned a trust score of 0/100 and Scamadviser rated it 26/100. The domain appears on one security blocklist and was detected using technologies including PHP, Bootstrap, LiteSpeed, and HTTP/3. The page title, "Countee Global Bank - Fintech, Banking, & Finance," closely resembles legitimate banking portals, increasing the likelihood of successful social engineering. Infrastructure analysis indicates the domain was likely part of a broader phishing campaign, given its short lifespan and immediate takedown. Organizations and users are advised to block the domain and associated IP at network and endpoint levels. Financial institutions should monitor for unauthorized access attempts linked to credentials potentially harvested via this domain. Users who interacted with counteeglobalbnk.com should reset passwords, enable multi-factor authentication, and review account activity for anomalies. Proactive monitoring of newly registered domains with similar naming patterns (e.g., variations of "globalbnk") is recommended to preempt future threats.