bnbhomes[.]in

Analysis of bnbhomes.in shows a newly created domain (registered on December 09, 2023) that is actively being used for phishing. The registration was processed through GoDaddy, and the domain resolves to the IPv4 address 68.178.152.158. VirusTotal has recorded 18 detections out of 91 security vendors, indicating that a notable portion of scanners consider the host malicious. The domain appears on a single public security blocklist and has been explicitly blocked by the PhishDestroy service, confirming its presence on at least one curated anti‑phishing feed. The risk level has been assessed as elevated and the operational status is marked as active.

No additional intelligence such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts beyond the PhishDestroy block is currently available. Consequently, the exact content served by the site, the specific brand or service being spoofed, and any payloads delivered to victims remain unknown pending further investigation. The lack of public page metadata limits the ability to describe the visual or functional characteristics of the phishing page, and no Open Threat Exchange (OTX) references have been reported for this host.

Defenders should prioritize immediate containment actions: add bnbhomes.in and its resolved IP address 68.178.152.158 to network and endpoint blocklists, enforce DNS filtering against the domain, and monitor for any outbound connections to the host. Given the existing detections by multiple vendors, security products that incorporate threat intelligence feeds are likely to flag the domain automatically, but manual inclusion in internal blocklists can reduce latency. Continuous re‑assessment is advised, as additional indicators such as SSL fingerprint, HTTP status, or page title may emerge from future harvesting of the site. Organizations should also review email gateway logs for messages containing bnbhomes.