cambridgeinvestmentbank[.]online

The domain cambridgeinvestmentbank.online is a confirmed banking phishing site designed to deceive users into disclosing financial credentials or cryptocurrency-related information. It does not impersonate a legitimate brand but presents itself as a fictitious investment bank, targeting victims through fraudulent login pages and cryptocurrency scams. As of the latest verification, the site has been taken offline, though prior activity classified it as an elevated-risk threat.

Technical analysis reveals that cambridgeinvestmentbank.online was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and Netcraft, with a Gridinsoft trust score of 0/100. The domain appears on 1 security blocklist (PhishDestroy) and was registered on February 21, 2026. It resolved to the IP address 163.61.188.2, hosted in the US under AS153568 (NEW DHAKA HARDWARE), and used an SSL certificate issued by R10. The observed page title was 'Welcome |Cambridge Investment Bank'.

Users who interacted with cambridgeinvestmentbank.online should immediately change any exposed banking or cryptocurrency credentials, enable two-factor authentication on all financial accounts, and monitor for unauthorized transactions. For cryptocurrency-related exposure, revoke any token approvals granted to suspicious sites and transfer funds to a new wallet. Report the domain to local cybercrime authorities, Google Safe Browsing, and platforms like PhishTank or the Anti-Phishing Working Group to aid in broader takedown efforts.