bankofceylon[.]online

The domain bankofceylon.online is a confirmed banking phishing site designed to steal login credentials and financial information from victims. It does not impersonate a specific legitimate brand but presents itself as a banking portal to deceive users. As of the latest verification, bankofceylon.online has been taken offline, though it previously posed an elevated risk as a banking phishing threat.

Technical indicators show limited but notable detection: 2 of 95 VirusTotal security vendors flagged bankofceylon.online, including Gridinsoft and SOCRadar. The domain was created on 2026-03-09 and resolves to the IP address 172.67.195.196, hosted on Cloudflare's infrastructure in the US (AS13335). It appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by E8, and the observed page title was 'Error'. AlienVault OTX recorded the domain in one threat intelligence pulse, further confirming its malicious nature.

Users who may have interacted with bankofceylon.online should immediately change any banking or financial credentials entered on the site. Enable two-factor authentication (2FA) on all accounts to prevent unauthorized access. Monitor bank statements and transaction histories for signs of fraud or unauthorized activity. Report the phishing domain to local cybersecurity authorities, financial institutions, and platforms like Google Safe Browsing or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.