acbfcuonline[.]com

Analysis of acbfcuonline.com, observed on July 25, 2026, indicates a brand‑impersonation campaign targeting Access Bank users with a crypto‑related scam. The domain was registered on February 21, 2026 and is currently taken offline. DNS resolution points to IP address 163.61.188.2, which is geolocated to the United States and associated with ASN 153568 (NEW DHAKA HARDWARE). The site presented the page title "Access Bank - Money Transfer & Banking," matching the declared brand target across.

An SSL certificate identified as R11 was in use at the time of capture. Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, reflecting a highly malicious assessment. The domain has been blocked by PhishDestroy and appears on a single security blocklist. VirusTotal scanning recorded a single positive detection out of 93 security vendors, confirming that at least one vendor flagged the domain as malicious.

The limited detection footprint suggests that the campaign may have been short‑lived or quickly mitigated. Uncertainties remain regarding the full scope of the infrastructure, the specific phishing kit employed, and any additional hosting or command‑and‑control resources, as no further intelligence was disclosed. Defenders should continue to monitor for related indicators, enforce blocklisting of the IP and domain, and incorporate the observed SSL fingerprint and page title into detection rules. Network traffic to 163.61.188.2 should be inspected for anomalous crypto‑transaction patterns, and any residual credential harvesting attempts should be mitigated through user education and credential rotation.