bnbgives[.]com

Analysis indicates that bnbgives.com was registered on October 15 2025 through Tucows Domains Inc. The domain resolves to the IPv4 address 66.33.22.132, which is assigned to AS400940 operated by Railway in the United States. The authoritative nameservers are listed as 2-nest.pipe.ma, 1‑ceci.njalla.do and 3‑pas.njalla.in. An SSL certificate identified as R13 is present, but the site returns a HTTP 404 Not Found title, suggesting that the front‑end content has been removed or the host is no longer serving the expected pages. The domain is currently marked offline by threat intelligence sources. Detection telemetry shows that ten of ninety‑three security vendors on VirusTotal flagged the domain, indicating a moderate level of malicious classification across the community.

AlienVault OTX includes the domain in one threat‑intelligence pulse, and the domain appears on one external security blocklist. Gridinsoft assigned a trust score of zero out of one hundred, and the commercial phishing mitigation service PhishDestroy has listed the domain as blocked. The scam type recorded in the intel feed is “Crypto Scam,” consistent with the naming pattern of the domain, although no specific cryptocurrency brand is directly referenced in the collected data. Given the observed infrastructure, the domain is likely being used to lure victims into cryptocurrency‑related fraud, possibly by promising giveaways or investment returns.

The combination of a recent registration, low‑reputation hosting, multiple security vendor detections, and a zero trust score warrants elevated risk. Defenders should continue to block the domain at perimeter devices, update DNS filtering policies, and monitor for any residual traffic to 66.33.22.132. Additional investigation is needed to retrieve archived content or phishing templates that may reveal the exact luring technique.