sekhemonline[.]net

Sekhemonline.net is a live phishing page masquerading as a banking login portal. Once visited, the page attempts to harvest online banking credentials by presenting a convincing fake login form. Victims who enter their username and password will have those details sent to attackers, putting their bank accounts at immediate risk of theft. The domain leverages social engineering by using a name that closely resembles a legitimate financial service, tricking users into believing it is authentic. This tactic is effective because many people enter banking sites without verifying the URL, making automated detection difficult for non-technical users. Threat actors rotate domains quickly to evade blacklists, which is why this site only appeared on February 25, 2026. PhishDestroy identifies this domain as part of an active credential-harvesting campaign. The domain is registered through GoDaddy.com, LLC and resolves to IP 177.210.149.197. It uses a valid Let’s Encrypt SSL certificate to appear legitimate. VirusTotal confirms 15 out of 95 security engines now detect this domain as malicious. The domain’s recent creation date (February 25, 2026), combined with low detection rates on launch day, highlights how quickly such sites go live to avoid early capture. Attackers favor services like GoDaddy for speed and anonymity, and Let’s Encrypt certificates are commonly abused to bypass browser warnings. These indicators are consistent with opportunistic phishing operators who exploit free tools to maximize reach and minimize cost. If you visited Sekhemonline.net, immediately change your banking passwords from a clean device and enable multi-factor authentication. Do not use links from emails or ads to reach your bank — navigate directly to the official site using a bookmark or verified search engine result. Scan your device with updated antivirus software for potential malware, as some phishing pages silently install keyloggers or credential-stealing programs. Check your bank statements for unauthorized transactions daily for at least 7 days. Report the domain to your bank and file a complaint with your country’s cybercrime reporting authority. Consider using a password manager to avoid fake login pages in the future — it will only autofill credentials on verified domains. Stay vigilant: treat any unexpected login prompt as suspicious, even if the site looks real.