bancodnap[.]online

Analysis of bancodnap.online indicates this domain was actively hosting a credential phishing page targeting financial services users. The domain was registered on February 21, 2026, and resolves to IP address 13.248.148.254, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by a low-assurance provider commonly used in phishing operations. The page title, 'bancodnap.online', suggests an attempt to mimic a legitimate banking portal, though no specific brand name is confirmed in the available metadata.

At the time of assessment, the domain was flagged by two of 93 security vendors on VirusTotal and appears on at least one security blocklist, including PhishDestroy. The current status is offline, likely following detection or takedown action. No additional scam classification (e.g., crypto, investment, shipping) or phishing kit fingerprint is available in the provided data.

Defenders should treat this domain as a confirmed phishing threat and block resolution at the DNS level. Network logs should be reviewed for connections to 13.248.148.254 or the domain name, particularly from endpoints accessing financial services. Further analysis of captured payloads or historical snapshots may clarify the targeted brand or campaign scope, but no such evidence is currently available.