bandicam[.]io

This domain is assessed as high risk and classified as a generic phishing threat. Analysis indicates the site impersonates legitimate screen recording software to harvest credentials or distribute malware.

Infrastructure analysis reveals the domain was created on January 30, 2026, and registered through Spaceship, Inc. VirusTotal shows 18 out of 95 security vendors flagging this domain as malicious. It resolves to IP address 172.67.139.137, secured with a Let's Encrypt SSL certificate. The domain appears on one security blocklist and is blocked by Maltrail. AlienVault OTX reports its presence in 2 threat intelligence pulses. The page title is Bandicam Screen & Game Recorder for Windows, mimicking the official product.

Mitigation steps include blocking the domain and associated IP at network perimeter firewalls, conducting user awareness training on phishing sites mimicking software downloads, and scanning endpoints for any downloaded executables from this domain. Monitor logs for connections to 172.67.139.137 and report the domain to relevant threat intelligence platforms for takedown coordination.