securebnb[.]in

Analysis of www.securebnb.in shows a newly registered domain created on 21 February 2026 via GoDaddy.com, LLC. The site resolves to the IP address 216.198.79.1, which belongs to Amazon.com, Inc. (AS16509) and is physically located in the United States. The host provides an HTTPS endpoint secured by a Let’s Encrypt certificate (R13) and advertises HTTP Strict Transport Security (HSTS). The web server reports a 200 HTTP status and the underlying platform is identified as Vercel. The page title delivered by the server is “Official USDT Verification - BNB Smart Chain,” aligning with the listed scam type of a crypto‑related fraud.

Threat intelligence sources have placed the domain on at least one security blocklist, and the PhishDestroy service has actively blocked it. VirusTotal scans show that two of ninety‑three security vendors have flagged the domain, indicating a low but non‑zero detection ratio. Nameserver configuration uses ns43.domaincontrol.com and ns44.domaincontrol.com, consistent with the GoDaddy registrar. While the available data confirms the domain’s association with a crypto‑scam infrastructure, the exact payload or credential‑gathering mechanisms have not been publicly disclosed.

The limited vendor detections suggest that the site may be employing techniques that evade many scanners, or that the content has not yet been fully analyzed. Defenders should treat the domain as hostile, enforce blocking at network perimeters, and add the IP address 216.198.79.1 to deny‑list rules. Continuous monitoring of threat‑intel feeds for additional detections, changes in blocklist status, and any observed phishing URLs is recommended. Organizations that handle USDT or BNB assets should educate users about the fraudulent title and advise them to verify URLs against official Binance resources before entering credentials.