brinprimefn[.]com[.]growthcreditfn[.]com

The domain brinprimefn.com.growthcreditfn.com was registered on February 21, 2026 and is currently reported as offline. DNS resolution points to IP address 198.12.93.82, which is hosted in the United States under autonomous system AS36352 belonging to HostPapa. The hosting provider’s reputation is not directly indicated, but the IP appears on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. The site presented an SSL certificate labeled R11, a rating that typically denotes low trustworthiness and suggests the certificate may be self‑signed or otherwise unvalidated. The page title returned by the server, "Brin Prime Finance Bank | Online Banking & Payment," aligns with a brand‑impersonation attempt, and the intelligence tags the activity as a crypto‑related scam targeting a broad audience (brand target "across").

Detection engines provide mixed signals: ten out of ninety‑three VirusTotal‑linked security vendors flagged the domain as malicious, indicating a moderate level of consensus among scanners. Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the perception of high risk. Despite these indicators, the domain’s presence on only one public blocklist suggests limited visibility in some threat‑sharing feeds.

Uncertainty remains regarding the exact payload or luring mechanisms, as no detailed page content or malware analysis has been published. The offline status prevents real‑time verification of the site’s behavior, and the lack of additional blocklist listings means that some security products may not yet recognize the domain.

Defenders should proactively block the IP address 198.12.93.82 and the fully qualified domain name in network firewalls and DNS filtering solutions. Adding the domain to internal and external blocklists, especially those used by email gateways and web proxies, will reduce exposure.