bancaenlinea[.]sbs

On 23 July 2026 analysts observed that the domain www.bancaenlinea.sbs was registered on 21 February 2026 and is currently listed as offline. The site resolves to the IP address 20.151.236.245, which belongs to Microsoft Corporation (AS8075) and is geolocated in Canada. The SSL certificate presented by the host is identified as type R12. VirusTotal analysis shows that six of ninety‑five scanning engines flagged the domain as malicious, indicating a moderate level of detection across vendors.

The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy feed. Reputation services assign extremely low trust scores, with Scamadviser rating the site 1 out of 100 and Gridinsoft rating it 0 out of 100. AlienVault OTX records the domain in one threat‑intel pulse, reinforcing its association with malicious activity. The page title returned from the HTTP response is “Bantrab en Línea — Personas,” which does not correspond to the claimed impersonation target.

The threat classification is identified as brand impersonation of the financial brand Linea. The elevated risk rating reflects the combination of recent creation, low reputation, and detection by multiple vendors. Defenders should ensure that the domain is added to DNS and proxy blocklists, monitor traffic to the associated IP address for any residual activity, and consider extending detection rules to capture similar “.sbs” domains that reference financial services. Ongoing observation of the host’s certificate and any future re‑registration attempts is recommended.