bbva-italia[.]app

PhishDestroy identifies bbva-italia.app as a fraudulent website posing as a BBVA bank login portal, designed to steal your online banking credentials. This domain mimics the legitimate BBVA banking service to trick users into entering their login details, which are then harvested by cybercriminals for unauthorized access to bank accounts. The site uses social engineering tactics, such as a convincing replica of BBVA’s branding and login interface, to deceive visitors into believing it is a legitimate banking platform. If you encounter this domain, do not enter any personal or financial information, as it will be sent directly to attackers.

This domain was flagged by PhishDestroy’s automated systems and is currently under investigation. The domain bbva-italia.app was registered on April 20, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and is hosted on IP address 185.114.97.3. Despite its recent creation, it has not yet been flagged by VirusTotal, with 12 out of 95 security engines detecting it as malicious. The domain also utilizes a Let’s Encrypt SSL certificate, which may further lend it an air of legitimacy. These technical indicators suggest an actively evolving phishing campaign that has not yet been widely recognized by security vendors.

If you have visited bbva-italia.app, immediately check your BBVA bank account for any unauthorized transactions and consider changing your password from a trusted device. Do not use the same password across multiple accounts, as cybercriminals may attempt to reuse stolen credentials. Report the domain to PhishDestroy or your local cybersecurity authority to help block its distribution. Install an updated antivirus or anti-phishing browser extension to prevent future exposure to similar threats. Stay vigilant and verify the legitimacy of banking websites by checking the official BBVA domain (bbva.it) before entering any sensitive information.