securenestbk[.]org
“Secure Nest Bk - Dedicated to innovating, simplifying, and humanizing digital banking.”
Observación almacenada
Contraste de títulos observado
securenestbk.org is a malicious domain identified as a credential phishing site impersonating a digital banking service named Secure Nest Bk. The domain does not appear to be associated with any known drainer kits or additional malware.
Infrastructure analysis reveals that the domain was created on May 16, 2026, and is registered through TuringSign Inc. d/b/a Cosmotown. It resolves to the IP address 163.61.188.2, which is located in the United States and associated with MIT. The domain uses a Let's Encrypt SSL certificate. VirusTotal has flagged this domain with a score of 17 out of 95, indicating a moderate level of detection among security vendors. The domain is listed on one security blocklist, specifically PhishDestroy, and is currently marked as offline.
As of the latest assessment, the domain status is offline, which reduces the immediate risk. However, it is recommended that security teams continue to monitor for any reactivation or related malicious activities. Further actions include updating internal blocklists and informing users to avoid interacting with any similar-looking domains. The risk remains elevated due to the domain's history and potential for reuse in future attacks.
Señales de seguridad
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes · sincronizado el 10/08/2026
Cronología de detección
Observaciones almacenadas en orden cronológico.
-
Observación almacenada
Observación almacenada: alive → dead
-
Observación almacenada
Observación almacenada: dead → alive
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.