dashboard-axosbank[.]com

This domain, dashboard-axosbank.com, is identified as a credential theft operation specifically designed to impersonate Axos Bank, a legitimate U.S.-based financial institution. Analysis indicates the site employs a fraudulent login interface to harvest user credentials, likely deploying static or dynamically generated pages to mimic the bank’s authentic dashboard. No direct evidence of a crypto drainer kit or blockchain-related functionality was observed, though credential theft remains the primary objective. The infrastructure aligns with typical banking phishing campaigns, where stolen credentials are monetized through unauthorized account access or sold on underground markets. Infrastructure analysis reveals the domain was registered on May 7, 2026, through MAT BAO CORPORATION, a registrar frequently associated with abuse complaints. It resolves to the IP address 87.251.64.170, which has been flagged in prior malicious activity reports. Google Safe Browsing classifies the domain under SOCIAL_ENGINEERING, confirming its use in deceptive practices. Security vendors on VirusTotal detect the domain at a rate of 18/95, while it appears on two independent security blocklists. The page title, dashboard-axosbank.com, further reinforces the impersonation attempt by replicating a plausible banking portal identifier. As of the latest assessment, the domain has been taken offline, likely due to automated takedown mechanisms or registrar intervention. Despite its inactive status, residual risk persists for users who may have interacted with the site prior to its removal. Stolen credentials could still be exploited, and the infrastructure may resurface under a different domain or IP. Users are advised to monitor financial accounts for unauthorized activity, reset passwords for any services accessed during the exposure window, and verify the legitimacy of banking portals by cross-referencing official URLs. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.