bnb-card[.]gate-cryptolist[.]com

The domain bnb-card.gate-cryptolist.com was registered on June 17 2024 through the registrar Key-Systems GmbH. It resolves to the single IPv4 address 188.114.96.3 and is served behind Cloudflare’s network, as evidenced by the authoritative nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. The domain is currently active and has been assigned a generic phishing classification with an elevated risk level. VirusTotal records indicate fifteen detections out of ninety‑one scanning engines, confirming that a significant subset of commercial security products identify the domain as malicious. Independent blocklisting services have also taken action: PhishDestroy lists the domain as blocked, and it appears on one additional security blocklist.

The convergence of these indicators strengthens the confidence in the phishing assessment. Infrastructure analysis reveals no unusual hosting characteristics beyond the use of a reputable CDN, a pattern frequently observed in malicious campaigns that seek to obscure the true backend server and benefit from Cloudflare’s performance and protection features. The registrar, while legitimate, does not mitigate the risk posed by the domain’s recent creation date and dedicated IP, which are consistent with purpose‑built phishing infrastructure. Publicly available information does not include page‑level artefacts such as the HTTP status code, SSL certificate details, or the exact page title, leaving the precise phishing vector and any targeted brand unspecified. Consequently, the full scope of the threat remains partially unknown pending dynamic analysis.

Defenders should proactively block bnb-card.gate-cryptolist.com at perimeter firewalls, DNS resolvers, and endpoint filters. Adding the associated IP address 188.114.96.3 to deny lists can further reduce exposure. Email security gateways should be updated to flag URLs containing this domain.