bankofamericagirl.ph: Bank of America 사칭. PhishDestroy가 2026-09-10에 탐지했습니다. 위험도: 심각 (100/100). 상태: 마지막으로 알려진 활성. 호스팅: Akamai Connected Cloud. PhishDestroy는 악용 신고 1건을 보냈습니다. VirusTotal: 엔진 16/89개가 탐지. Google 세이프 브라우징이 위험으로 표시. 로그인 정보를 입력하거나 지갑을 연결하지 마세요.
“Redirecting...”
Resolved IP
45.79.222.138
PhishDestroy assessment
심각100/100증거 점수
가용성
마지막으로 알려진 활성최근에 저장된 도달 가능성 관찰관측됨 · HTTP probe
위험 신호
VirusTotal 탐지: 16/89URLQuery threat systems: 1 alert자동 브랜드 라벨: Bank of AmericaGoogle Safe Browsing: threat flag recorded
탐지를 보고하는 보안 엔진: 16. 극도의 주의를 기울이십시오 — 자격 증명이나 개인 정보를 입력하지 마십시오.
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@linode.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations.
This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Bank of America 사칭: bankofamericagirl.ph — 마지막으로 알려진 활성 (HTTP 200). 증거 요약: VirusTotal 16/89 (alphaMountain.ai, BitDefender, CRDF, ESET, Emsisoft); URLQuery 1…
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
bankofamericagirl.ph is an impersonation phishing site that trades on the Bank of America name to target the bank's customers. It sits on a Philippine country-code domain with an odd suffix tacked onto the brand, and a real bank would never use an address like that. PhishDestroy first saw it on 2026-09-10. On 2026-10-19 the site was still online and serving content.
How the scam works
Bank impersonation pages like this one usually arrive through a text message, email or social media post that warns about a locked account or a suspicious charge. The link leads to a lookalike sign-in flow. Anything typed there, such as the username, password, card number, personal details or a one-time passcode, goes to the operators, who can use it to take over the account and move money. The page title reads "Redirecting...", which points to an intermediate hop that forwards visitors onward, while our classification is impersonation phishing of Bank of America.
Evidence
On 2026-09-23, 16 of 89 VirusTotal engines flagged the domain. Those vendors include BitDefender, ESET, Fortinet, Forcepoint ThreatSeeker, Emsisoft, Fortra, CRDF and alphaMountain.ai. Google Safe Browsing labels it SOCIAL_ENGINEERING, so Chrome and other browsers that use the service should show a warning before the page loads. The domain also appears in four AlienVault OTX threat pulses, which means other researchers have tracked it independently. PhishDestroy lists it on its blocklist.
Infrastructure
The site is hosted on Akamai Connected Cloud at 45.79.222.138, in the United States. The Philippine domain extension has no link to Bank of America's real web presence. The HTTPS certificate comes from Let's Encrypt, a free and automated service, so the padlock in the address bar only means the connection is encrypted. It says nothing about who runs the site.
What to do
If you entered your Bank of America login on this site, change the password right away from the bank's official app or by typing the bank's address yourself. Turn on or reset two-step verification, and sign out of all other sessions. If you gave a card number or a one-time code, call the number printed on the back of your card to freeze the card and dispute any charges you don't recognize. Watch for follow-up calls or texts claiming to be the bank's fraud team, because these often come after credential theft. Defenders should block the domain and its hosting IP at the DNS and proxy layers and search mail and SMS gateway logs for links to it.
아니요. PhishDestroy는 bankofamericagirl.ph을(를) Bank of America 사칭(으)로 분류합니다(위험도: 심각, 100/100). 처음 탐지된 날짜는 2026-09-10입니다. VirusTotal: 엔진 16/89개가 탐지. Google 세이프 브라우징이 위험으로 표시. 안전하지 않은 사이트로 취급하세요.
bankofamericagirl.ph에 지갑을 연결해도 안전한가요?
아니요. bankofamericagirl.ph에서 지갑을 연결하거나 메시지에 서명하거나 토큰을 승인하지 마세요. 피싱 사이트는 운영자가 자산을 옮길 수 있게 하는 승인(approve, setApprovalForAll, Permit2)을 요청하며, 확정된 거래는 되돌릴 수 없습니다.
bankofamericagirl.ph을(를) 이용했다면 어떻게 해야 하나요?
그곳에 입력한 모든 비밀번호를 바꾸고 2단계 인증을 켜세요. 지갑을 연결했거나 무언가에 서명했다면 승인을 취소하고 남은 자금을 새 지갑으로 옮기세요. 시드 문구는 절대 공유하지 마세요. 단계별 안내: 긴급 대응 가이드.
Evidence layersAvailability: Content servingContent: Content served at rootDNS: ResolvedRegistration: Unknown
Latest HTTP observation활성 콘텐츠Ordinary HTTP content served90%2026-10-22 10:25:31 UTC
RDAP registration알 수 없음
Observed timelinelast reachable: 2026-10-22 10:25:31 UTClast content: 2026-10-22 10:25:31 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
