# ipkos-pl.online — SUSPICIOUS

> ipkos-pl.online is linked to low-risk generic phishing targeting PKO Bank users. Stay alert and avoid sharing sensitive info on this site.

## Summary
PhishDestroy identifies ipkos-pl.online as an active domain involved in generic phishing activities with a low-risk classification. The site mimics the iPKO electronic banking platform of PKO Bank Polski, potentially aiming to deceive users into divulging personal information.

The domain was registered recently on March 6, 2026, through eNom, Inc., and resolves to IP address 75.2.60.5. Although VirusTotal shows minimal detection with only 1 out of 95 security vendors flagging it, the combination of its recent creation date and deceptive page title raises suspicion about its intent.

Users are advised to exercise caution and refrain from entering credentials or sensitive data on ipkos-pl.online. PhishDestroy recommends monitoring access attempts to this domain and blocking it within organizational networks. The domain remains active, signaling ongoing risk to unsuspecting individuals.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: iPKO - bankowość elektroniczna PKO Banku Polskiego

## Domain Intelligence
- Registered: 2026-03-06 00:03:45
- Registrar: eNom, Inc.
- Country: US
- IP: 75.2.60.5
- IP Country: US
- IP City: Seattle
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: ns1.amenworld.com ns2.amenworld.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["PREBYTES"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/fV0Q545b/5f75cdac7fbc.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/6bb3b8dd-17e3-4348-927b-7e1d18fc6b2d
- PhishDestroy: https://phishdestroy.io/domain/ipkos-pl.online/
- LLM endpoint: https://phishdestroy.io/domain/ipkos-pl.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ipkos-pl.online/
Last updated: 2026-03-19