layerbank-v3[.]com

This domain, layerbank-v3.com, is identified as a high-risk banking phishing resource designed to mimic legitimate financial services. Analysis indicates the site impersonates LayerBank, a known digital banking platform, likely to harvest user credentials and sensitive financial data. No specific drainer kit signatures were confirmed, but the infrastructure aligns with credential theft operations observed in recent phishing campaigns. Infrastructure analysis reveals the domain was registered on April 14, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious registrations. The domain resolves to IP address 172.67.170.216, hosted behind Cloudflare, which is commonly exploited to obfuscate origin servers. Detection metrics show 10 out of 95 security vendors on VirusTotal flag the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds, including MetaMask and PhishDestroy. As of the latest assessment, layerbank-v3.com has been taken offline, likely due to enforcement actions or infrastructure takedown. However, residual risk remains due to the domain's recent registration and association with confirmed phishing activity. Users who accessed the site prior to its deactivation should assume credential exposure and initiate account remediation procedures, including password resets and transaction monitoring on all linked financial accounts.