bncred[.]com

The domain bncred.com, which masquerades as BNP Credit Union, has been taken down but was previously flagged by PhishDestroy on February 26, 2026. Despite its offline status, it managed to deceive users by presenting itself as a trusted financial entity. Only 1 out of 93 VirusTotal vendors identified the domain as malicious, highlighting the challenge of early detection.

Registered through Web Commerce Communications Limited dba WebNic.cc, the domain was hosted on an IP address in the United States under AS36352 HostPapa. The site used an SSL certificate issued by R10, which may have lent it an air of legitimacy to unsuspecting users. The platform risk score of 56 out of 100 indicates a moderate risk level, suggesting the site's potential to conduct harmful activities before its takedown.

The presence of bncred.com on a public blocklist, specifically PhishDestroy's, underscores the importance of proactive threat identification. Phishing domains like this exploit the critical window between registration and widespread detection by antivirus vendors. PhishDestroy's ability to flag such threats early is crucial in mitigating their impact, even when broader detection lags behind. The case of bncred.com serves as a reminder of the evolving tactics used by cybercriminals to exploit trusted brands.