app[.]bunestack[.]com[.]ng

Analysis of app.bunestack.com.ng indicates this domain was flagged as a phishing threat targeting trading or financial platforms. The domain was created on February 21, 2026, and is currently offline as of the report date, July 22, 2026. It appears on one security blocklist, specifically PhishDestroy, and was detected by 1 of 93 security vendors on VirusTotal, suggesting limited but confirmed malicious activity. The page title, 'trade_web,' aligns with infrastructure commonly used for financial or trading-related phishing schemes, though the exact target brand or service remains unconfirmed due to lack of further analysis.

Infrastructure details reveal the domain uses an SSL certificate labeled R11, which may indicate a low-trust or automated issuance pattern often seen in phishing campaigns. No additional hosting, registrar, or IP-based indicators were provided, limiting deeper infrastructure correlation. The domain’s presence on a single blocklist and minimal vendor detection on VirusTotal do not diminish its risk; phishing domains often evade broader detection until more widespread abuse is observed.

Defenders should treat this domain as a confirmed phishing threat, particularly for trading or financial services, and block or monitor any connections to it. Given its current offline status, further analysis may be restricted, but historical logs or proxy data should be reviewed for prior interactions. If the domain reactivates, additional scrutiny of its SSL certificate, hosting provider, and page content is recommended to identify any shifts in targeting or evasion tactics.