mapachin[.]sbs

This domain, mapachin.sbs, was designed to steal login credentials from Bank of America customers by mimicking the official online banking portal. Visitors were presented with a fraudulent login page titled 'Bank of America | Online Banking | Log In | User ID,' which closely resembled the legitimate site. The goal was to trick users into entering their user IDs and passwords, enabling attackers to gain unauthorized access to accounts and potentially conduct financial fraud or identity theft. Analysis indicates this is a high-confidence phishing operation. The domain was created on February 21, 2026, and registered through Cosmotown Inc. It resolved to the IP address 50.6.197.178, hosted on AS19871 (Network Solutions, LLC) in the United States. No SSL certificate was present, increasing the risk of interception. Security vendors on VirusTotal flagged the domain as malicious, with 21 out of 95 engines detecting it as a phishing site. Additionally, it appeared on one security blocklist and was flagged by Google Safe Browsing for phishing activity. If you visited mapachin.sbs or entered any login credentials, take immediate action to secure your accounts. First, change your Bank of America password and enable multi-factor authentication if not already active. Monitor your account for unauthorized transactions and report any suspicious activity to the bank. Run a full scan on your device using updated security software to check for malware. Consider placing a fraud alert or credit freeze with major credit bureaus to prevent identity theft. Avoid clicking on links in unsolicited emails or messages, and always verify the URL of banking sites before entering credentials.