caixabank[.]support

This domain, caixabank.support, is under investigation as an active phishing site targeting banking credentials. Infrastructure analysis reveals it is currently flagged by one security blocklist and has been blocked by PhishDestroy, indicating preliminary detection by at least one security vendor. No detections were reported by the 91 vendors that scanned the domain on VirusTotal, though the absence of detections does not confirm safety and may reflect delayed or incomplete analysis.

The domain's registration and hosting details remain unconfirmed, and no additional context—such as associated IP, ASN, SSL certificate, or page content—has been provided in available intelligence. Defenders should treat this domain as a potential threat until further evidence is gathered. Immediate actions include monitoring for new blocklist additions, checking for related infrastructure (e.g., nameservers, hosting provider), and reviewing logs for connections from internal networks.

If the domain is confirmed to host phishing content, it should be added to internal blocklists and reported to relevant threat intelligence platforms for broader mitigation. Given the domain's alignment with a known financial institution's branding, organizations should prioritize alerting users to avoid interaction with caixabank.support and similar domains.