stakebnb[.]app

Analysis of stakebnb.app, registered on March 09, 2026 through Tucows Domains Inc., shows a clear brand‑impersonation campaign targeting Binance users. The site presents the page title "BNB Stake - BNB Chain Participation Program", indicating an attempt to lure victims into a wallet or seed‑phishing flow. Infrastructure inspection reveals the domain resolves to IP address 99.83.231.61, hosted within the United States under ASN 16509, Amazon.com, Inc. The TLS certificate is issued by Let’s Encrypt (R13), and the site employed Netlify services with HTTP Strict Transport Security enabled, typical of many temporary phishing drops.

Threat intelligence sources list the domain on one security blocklist and confirm it is blocked by PhishDestroy. VirusTotal scans recorded three positive detections out of ninety‑four participating vendors, reinforcing the malicious classification. Current operational status is offline, limiting immediate interaction but preserving the indicator for future monitoring.

Defenders should add stakebnb.app to internal blocklists, enforce DNS filtering, and monitor for any re‑hosting attempts on the same IP or Netlify account. Continuous observation of the associated IP range and the registrar’s new domain registrations is advised, as adversaries often recycle similar infrastructure. The limited public evidence does not reveal the exact phishing payload or credential‑capture mechanisms, so threat hunters should remain alert for related Binance‑related lures appearing in the wild.