en[.]securebanking[.]com[.]sg

PhishDestroy identifies en.securebanking.com.sg as an active banking phishing domain impersonating secure banking services in Singapore.

The domain en.securebanking.com.sg was flagged with a risk level marked as under_investigation. VirusTotal currently shows 0 detections out of 95 scans, indicating it has not yet been flagged by security vendors. The domain was created on June 03, 2016, and resolves to IP address 52.204.246.179. It uses a Let's Encrypt SSL certificate and is registered through MarkMonitor Inc., a registrar often associated with legitimate domains but sometimes exploited for malicious purposes. Despite its age, the domain remains active and has not been listed on major blocklists, suggesting a stealthy operation.

This phishing threat specifically targets users of banking services in Singapore, leveraging the trust associated with secure banking domains to deceive victims. The use of a legitimate-looking domain name, combined with a valid SSL certificate, increases the likelihood of successful deception. However, the lack of detections on VirusTotal and absence from blocklists highlights the domain's relatively low profile among current threat feeds. Users should exercise extreme caution when encountering this domain, especially if it appears in unsolicited emails or messages. Never enter personal or financial information into any page linked from this domain. Report any interactions to your bank and local cybersecurity authorities immediately.