trustaxisbnk[.]com

This domain, trustaxisbnk.com, is flagged for brand impersonation targeting Axis Bank, a financial institution. Analysis indicates the site mimics legitimate banking portals to harvest user credentials, likely through fake login interfaces or fraudulent transaction prompts. The page title, 'Trust Axis Bank - Fintech, Banking, & Finance,' reinforces the deception by closely resembling official Axis Bank branding, increasing the likelihood of successful phishing attempts against unsuspecting users. Infrastructure analysis reveals the domain was registered on May 18, 2025, through Atak Domain and resolves to the IP address 86.107.77.165, hosted on AS216395 (HostBet Cloud Technologies Private Limited) in Germany. The domain is associated with a Let's Encrypt SSL certificate (R12), which, while providing encryption, is frequently abused by threat actors to lend a false sense of legitimacy. VirusTotal detection shows 12 out of 95 security vendors flagging the domain as malicious, and it appears on one security blocklist. The domain was blocked by PhishDestroy, indicating prior identification as a phishing threat. As of the latest assessment, trustaxisbnk.com has been taken offline, reducing immediate exposure to users. However, the infrastructure remains a residual risk, as the IP and registrar could be reused for future campaigns. Organizations are advised to monitor for related domains registered through the same registrar or resolving to the same IP range. Users who may have interacted with the domain should reset credentials immediately and enable multi-factor authentication on all financial accounts. Network-level blocking of the IP 86.107.77.165 and domains registered via Atak Domain is recommended for proactive defense.