banklofamerica[.]co[.]com

Analysis identifies banklofamerica.co.com as a brand impersonation threat specifically targeting Google. The domain's page title, 789BET - Trang Chủ Chính Thức 2025 | Nạp Rút USDT Crypto, indicates a secondary purpose of promoting a gambling platform with cryptocurrency (USDT) integration, suggesting the domain may have been repurposed after the phishing campaign was disrupted. No specific drainer kit was identified, but the combination of brand impersonation and crypto-related content raises the risk of financial credential theft or cryptocurrency wallet compromise.

Technical indicators confirm elevated risk. VirusTotal reports 3 out of 95 security vendors flagging the domain as malicious. The domain resolves to IP 172.67.165.208, hosted behind Cloudflare with HTTP/3 support, and uses an SSL certificate from Google Trust Services. The domain was created on August 16, 1997, registered through Moniker Online Services LLC, and currently appears on 4 security blocklists (Codeesura, Polkadot, PhishDestroy, Enkrypt). Gridinsoft trust score is 0/100, reflecting strong negative reputation. No Google Safe Browsing status was provided, but the domain's inclusion on multiple blocklists suggests it was actively flagged.

Current status is offline, indicating the domain has been taken down or suspended. Response actions include blocking by four security vendors and flagging by multiple blocklists. Remaining risk is low while the domain remains offline, but residual risk exists if the domain is reactivated or if similar domains are registered by the same actor. Users should avoid interacting with any emails or links referencing banklofamerica.co.com or similar variations, especially those claiming to be from Google or offering cryptocurrency services. Monitoring for domain re-registration or related infrastructure is recommended.