rewardss[.]boats

This domain presents a direct credential harvesting threat targeting customers of Bank of the Philippine Islands (BPI). The site displays a fraudulent login interface mimicking the legitimate BPI online banking portal, designed to capture usernames, passwords, and potentially one-time passwords (OTP) or security questions. Victims who enter credentials on this page risk immediate account takeover, unauthorized fund transfers, and identity theft. The site may also attempt to deliver malware under the guise of security updates or authentication requirements. Analysis indicates this is a deliberately constructed phishing operation with multiple technical red flags. The domain was registered on May 31, 2026 through Hefei Juming Network Technology Co., Ltd, a registrar frequently associated with malicious domains. VirusTotal shows 6 out of 95 security vendors flagging the domain as malicious, with detections from specialized anti-phishing engines. Infrastructure analysis reveals the site is hosted on Cloudflare IP 188.114.96.3 (AS13335) with no SSL certificate, an unusual configuration for legitimate banking portals. The domain appears on three security blocklists including enterprise-grade phishing protection systems. Individuals who visited rewardss.boats should immediately take protective measures. First, change all banking credentials from a secure device, prioritizing the BPI account and any accounts sharing the same password. Enable multi-factor authentication if not already active. Monitor bank statements for unauthorized transactions and report suspicious activity to the financial institution. Scan the device used to access the site with updated security software to detect potential malware infections. Consider placing a fraud alert with credit bureaus if personal information was entered. Financial institutions and security teams should add this domain and its associated IP to blocklists, and monitor for credential reuse attempts from the same infrastructure.