bduedu[.]in

On July 24, 2026, the domain bduedu.in was flagged as a high-risk brand impersonation domain, specifically involved in a crypto scam. The domain was registered through GoDaddy.com, LLC and created on February 23, 2026. The website's page title, 'A Practical Guide to Modern Education Pathways | .Reviews,' does not align with typical educational content, raising further suspicion. Infrastructure analysis reveals that the domain is hosted by Amazon Web Services (AWS) and resolves to the IP address 23.12.147.93, located in the United States under the ASN AS16509, owned by Amazon.com, Inc. The domain's SSL certificate is issued by Amazon RSA 2048 M04, which is a standard practice for AWS-hosted sites. However, the presence of this certificate does not mitigate the domain's malicious intent.

The domain's MX records indicate that it uses Google's mail servers, suggesting a potential attempt to appear legitimate. The technologies detected on the site include Node.js, Amazon ELB, React, Next.js, Rudderstack, Microsoft Advertising, and Google Tag Manager, which could be used to enhance the site's functionality and disguise its true nature. Both Scamadviser and Gridinsoft have assigned the domain extremely low trust scores of 1/100 and 0/100, respectively, indicating a high level of distrust. Additionally, the domain has been mentioned in 15 threat intelligence pulses on AlienVault OTX, further confirming its malicious nature.

The domain is currently listed on one security blocklist and has been blocked by PhishDestroy, a security solution. The HTTP status code 301 suggests that the domain is redirecting to another location, which could be part of the scam's operational mechanism. Defenders should treat this domain with caution and monitor for any signs of crypto-related malicious activities.