banco-do-brasil[.]site

Analysis of the domain banco-do-brasil.site indicates it is an active phishing infrastructure targeting Banco do Brasil customers. Registered on July 23, 2026, through NameSilo, LLC, the domain currently resolves to IP address 188.114.97.3 and uses Cloudflare nameservers (mack.ns.cloudflare.com and tricia.ns.cloudflare.com). As of July 24, 2026, the domain appears on one security blocklist and is flagged by PhishDestroy, though it remains unflagged by the 91 vendors that scanned it on VirusTotal.

The absence of detections in these scans does not confirm the domain's safety, as phishing domains often evade initial detection. The domain's registration recency and use of Cloudflare infrastructure are consistent with patterns observed in phishing campaigns, where attackers leverage CDN services to obscure hosting origins and evade takedowns. Defenders should treat this domain as high-risk for credential harvesting or financial fraud, particularly given its impersonation of a major Brazilian financial institution.

Immediate blocking at the DNS or network level is recommended, along with monitoring for related domains registered through the same registrar or resolving to the same IP. Further investigation is required to determine the exact content of the phishing page, as no details about the site's structure, login forms, or redirection mechanisms are currently available.