atlaxchazebanking[.]com

PhishDestroy identifies atlaxchazebanking.com as a live banking phishing domain posing as a financial institution portal to harvest credentials and payment details. This domain was registered through ENOM, INC., flagged by only 2 out of 95 VirusTotal security vendors, and was created on May 14, 2026. It resolves to IP 159.100.6.19 and uses a Let’s Encrypt SSL certificate, tactics commonly abused to appear legitimate. The low detection rate and fresh creation date suggest this campaign is newly active and may evade some automated defenses. The threat assessment for this domain is elevated due to its targeted nature and recent deployment. Evidence includes: 2/95 VirusTotal detections, registration via ENOM, domain creation on May 14, 2026, and resolution to IP 159.100.6.19. These indicators highlight the domain’s use in phishing campaigns designed to deceive users into entering sensitive banking credentials. The SSL certificate issued by Let’s Encrypt further lends false credibility to the fraudulent site, increasing the risk of successful compromise. Users who visited atlaxchazebanking.com should immediately cease interaction and assume potential exposure of banking credentials or personal data. Do not enter any login details, payment information, or personal identifiers on this site. Clear browser cache and cookies related to the domain, and scan connected devices for malware using trusted security software. Report the domain to your bank and local cybercrime authorities. If credentials were entered, change passwords immediately and monitor financial accounts for unauthorized activity. Organizations should block this domain at network and DNS levels to prevent further access.