secureservicebank[.]com

This domain is flagged as an active banking phishing threat as of July 12, 2026. Analysis indicates the domain was registered on February 21, 2026 through Cosmotown, Inc., a relatively recent creation consistent with short-lived phishing infrastructure. The page title, Secure Service Bank | Online Bank Platform, aligns with the reported banking phishing classification. Infrastructure analysis reveals the domain resolves to IP 198.23.190.194, hosted on AS36352 (HostPapa) in the United States, and uses nameservers ns5.extrasolidweb.top and ns6.extrasolidweb.top, a pattern often associated with bulk or malicious registrations. The site employs LiteSpeed, jQuery, Chaport, and HTTP/3 technologies, and serves content over HTTPS with a Let's Encrypt / R13 certificate, which is common for phishing sites due to its free and automated issuance. VirusTotal data shows 6 of 93 security vendors flag this domain, and it appears on one security blocklist, with PhishDestroy specifically blocking it. The MX record points to the domain itself, suggesting email handling is not configured separately. The Gridinsoft trust score is critically low at 1/100, reinforcing the high-risk assessment. The exact content of the page has not been visually analysed, but the combination of recent registration, suspicious nameservers, low trust score, and vendor detections strongly indicates this domain is part of a phishing campaign targeting banking credentials. Defenders should block access to this domain at the network level, monitor for related subdomains or IPs, and alert users who may have visited the site. No further details about the specific brand targeted or phishing kit used are available in the current intelligence.