bacb-online[.]com

The domain bacb-online.com is a confirmed phishing site engaged in brand impersonation targeting American Express (amex) customers. It presented itself as 'BACB Bank' to harvest login credentials and financial details, posing an elevated risk of account takeover and fraud. As of the latest verification, bacb-online.com has been taken offline, but it remains a documented scam domain.

Technical indicators confirm the malicious nature of bacb-online.com. The domain was registered on 2025-05-17 13:16:21 through NameCheap, Inc. and resolved to the IP address 198.12.93.82, hosted on AS36352 (HostPapa) in the US. It appeared on 1 security blocklist (PhishDestroy) and was flagged by 2 of 95 VirusTotal vendors, including alphaMountain.ai and Fortinet. No SSL certificate was present, and the observed page title was 'Home - BACB Bank'. The domain used nameservers ns1.megatronserver.com and ns2.megatronserver.com. Google Safe Browsing did not flag the site, and Gridinsoft assigned a trust score of 0/100.

Individuals who interacted with bacb-online.com should immediately change any exposed passwords, particularly for American Express or linked financial accounts. Enable two-factor authentication (2FA) on all critical services to prevent unauthorized access. Monitor accounts for unauthorized transactions or suspicious activity and report any fraud to the impersonated brand’s official fraud department. Victims may also report the phishing domain to their local cybercrime unit or platforms such as the Anti-Phishing Working Group (APWG) or Google Safe Browsing.