cibc-digital-business-verify[.]com

This domain, cibc-digital-business-verify.com, is actively engaged in credential phishing targeting users of CIBC Business, a Canadian financial services platform. The site employs a fake reCAPTCHA verification page to lend legitimacy to the phishing attempt, a common tactic to deceive users into submitting sensitive login credentials. No specific drainer kit has been conclusively linked to this domain, though the infrastructure aligns with known phishing toolkits designed for financial fraud. Infrastructure analysis reveals the domain was registered on June 15, 2026, through OwnRegistrar, Inc., and currently resolves to the IP address 37.77.150.237, hosted on AS198953 (Proton66 OOO) in Russia. The SSL certificate is issued by Let's Encrypt (YR1), a common choice for both legitimate and malicious sites. Detection metrics indicate 6 out of 95 security vendors on VirusTotal have flagged the domain as malicious. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, though it has not been listed on Google Safe Browsing as of this report. The domain remains active, posing a continued risk to users who may encounter it through phishing emails, malicious advertisements, or compromised redirects. Immediate mitigation includes blocking the domain and its associated IP at the network level, as well as alerting users to the threat. Despite existing detections, the domain's persistence and use of a seemingly valid SSL certificate increase the likelihood of successful phishing attempts. Organizations are advised to monitor for related infrastructure and educate users on identifying fraudulent verification pages.