bnkrevent[.]network

Domain bnkrevent.network was flagged by PhishDestroy as an active credential theft site impersonating financial event portals. This domain, registered on March 21, 2026, is currently unresolved but configured to harvest user credentials under the guise of a banking event platform. The domain resolves to IP 188.114.96.3 and leverages a Let's Encrypt SSL certificate to enhance credibility. No public documentation confirms the deployment of a crypto drainer or specific brand impersonation, but behavioral patterns align with credential phishing campaigns targeting banking and financial services users.

Technical indicators for bnkrevent.network include a VirusTotal detection score of 2/95, indicating no antivirus or security vendor has flagged the domain as malicious at the time of analysis. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently abused by low-cost phishing operations. The IP address 188.114.96.3 is part of a range associated with hosting providers that tolerate malicious activity. The domain’s recent creation date—March 21, 2026—suggests a hastily deployed campaign intended to evade historical blocklists. Google Safe Browsing (GSB) status remains pending, and no current blocklist entries are recorded for this domain.

This campaign is assessed as ACTIVE with an under-investigation risk level. PhishDestroy recommends immediate blocking of bnkrevent.network at the network and endpoint levels. Users should be warned against accessing the domain and instructed to report any suspicious login prompts. The risk remains elevated due to the domain’s clean VirusTotal status, lack of GSB flagging, and absence from blocklists, enabling it to bypass automated defenses. Continuous monitoring for new artifacts and campaign expansion is advised.