Strange Domain in cPanel Awstats

Is this phishing?

[grandma genie]

Hello,

I was wandering around the files in my cPanel and went into the Awstats folder. It showed four different domains. Three are mine, but there is a fourth that looks creepy. The domains listed were:

dev.example.com
example.com
example.com (SSL)
bankofamerica.com.safe.accountaconfirmation.example.com

Anyone familiar with this type of account? Is this a hack? How do I get rid of it?

Grandma

[phranque]

perhaps your server is configured to accept requests for wildcard subdomains.

do you have a hostname canonicalization redirect in your server config/.htaccess?
have you tried to correlate those stats with entries in your server access log to see if that reveals any clues?