bankbnb[.]net

The domain bankbnb.net is currently active and has been classified as a high‑risk banking phishing site. Infrastructure analysis shows the domain is hosted on DigitalOcean’s network, using the authoritative name servers ns1.digitalocean.com and ns2.digitalocean.com. The registrar listed in WHOIS data is NameSilo, LLC, indicating a commercial registration service.

HTTP probing returned a 301 redirect response, suggesting the site forwards visitors to another location, a common technique for phishing infrastructure. The domain appears on one known security blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing the suspicion of malicious intent. VirusTotal scans report that three out of ninety‑one security vendors flagged the domain as malicious, providing independent confirmation of its threat profile.

No additional public intelligence such as Safe Browsing, OTX, or SSL certificate details were supplied. Given the confirmed phishing classification, the presence on a blocklist, and the multi‑vendor detections, defenders should prioritize immediate containment: add bankbnb.net to DNS‑based deny lists, enforce URL filtering at the proxy layer, and monitor for any outbound connections to the associated IP ranges of the DigitalOcean nameservers. Continuous re‑evaluation is advised, as further analysis of the landing page content and any associated command‑and‑control infrastructure could reveal additional indicators of compromise.