securenestbk[.]org

securenestbk.org is a malicious domain identified as a credential phishing site impersonating a digital banking service named Secure Nest Bk. The domain does not appear to be associated with any known drainer kits or additional malware.

Infrastructure analysis reveals that the domain was created on May 16, 2026, and is registered through TuringSign Inc. d/b/a Cosmotown. It resolves to the IP address 163.61.188.2, which is located in the United States and associated with MIT. The domain uses a Let's Encrypt SSL certificate. VirusTotal has flagged this domain with a score of 17 out of 95, indicating a moderate level of detection among security vendors. The domain is listed on one security blocklist, specifically PhishDestroy, and is currently marked as offline.

As of the latest assessment, the domain status is offline, which reduces the immediate risk. However, it is recommended that security teams continue to monitor for any reactivation or related malicious activities. Further actions include updating internal blocklists and informing users to avoid interacting with any similar-looking domains. The risk remains elevated due to the domain's history and potential for reuse in future attacks.