bankofai[.]icu

PhishDestroy identifies bankofai.icu as an active banking phishing domain designed to deceive users into submitting their financial login credentials. This fraudulent site impersonates a legitimate banking portal, tricking victims into revealing sensitive account information such as usernames, passwords, and multi-factor authentication codes. The domain employs social engineering tactics, including realistic UI elements and urgent messaging, to pressure users into entering their details under the false pretense of account verification or security updates. Once credentials are captured, attackers gain unauthorized access to victims' bank accounts, enabling theft, unauthorized transactions, or identity fraud. Security researchers have flagged this domain as a high-risk threat due to its potential to cause significant financial harm to unsuspecting users. This domain was flagged by PhishDestroy with a risk level of under_investigation and remains active as of the latest analysis. VirusTotal currently detects bankofai.icu with 0 detections out of 95 scanners, indicating it has not yet been widely recognized as malicious. The domain resolves to IP address 188.114.97.3 and uses a Let's Encrypt SSL certificate to appear legitimate. Registered through NameSilo, LLC, the domain was created on March 31, 2026, which suggests it is a recent and likely opportunistic threat. Despite its low detection rate, the domain's recent creation and active status warrant immediate caution from users. If you have visited bankofai.icu, discontinue any interaction with the site immediately and avoid entering any login credentials or personal information. Check your bank account for unauthorized transactions and report any suspicious activity to your financial institution. Enable multi-factor authentication (MFA) on all banking accounts if not already active, as this adds an additional layer of security. Use a reputable password manager to avoid manually entering credentials on unfamiliar sites. Report this phishing domain to your email provider, browser vendor, and financial institution to help block its distribution. Share this advisory with others to prevent further victims. Always verify the authenticity of banking websites by cross-referencing the domain with official sources, and never click on unsolicited links claiming to direct you to a bank login page.