piggybankpokies[.]com

PhishDestroy identifies piggybankpokies.com as an active banking phishing domain under investigation, posing a credible threat to Australian users. This site masquerades as a legitimate pokie (slot machine) gaming platform, specifically titled 'Piggy Bank Bonanza Pokie in Australia,' to deceive victims into entering sensitive financial or personal details. The threat is classified as banking-focused phishing due to its attempt to harvest credentials or payment information under false pretenses. This domain was flagged by PhishDestroy with the following indicators: VirusTotal currently reports 0 detections out of 95 security engines, indicating a lack of widespread recognition but not ruling out malicious intent. The domain was registered through Fewmoretaps OU, operating under the alias Trustname.com, and was created on March 20, 2026. It resolves to IP address 104.21.92.14 and utilizes a Let's Encrypt SSL certificate, which may lend an air of legitimacy. Notably, as of this report, the domain remains unlisted on major blocklists and maintains no adverse trust scores, suggesting a recently deployed or stealthily operated campaign. Mitigation for this banking phishing threat involves immediate avoidance of the domain and user caution regarding any 'Piggy Bank Bonanza' or similar gaming-themed financial solicitations. Organizations and individuals should block traffic to piggybankpokies.com at the network level and update endpoint protection rules to flag the domain and associated IP (104.21.92.14) as malicious. Users who may have interacted with the site should audit their financial accounts for unauthorized transactions and reset passwords for any accounts where credentials were reused. Reporting the domain to cybersecurity platforms such as PhishDestroy, Google Safe Browsing, or local financial cybercrime units can aid in broader takedown efforts.