bnbtrendings[.]live

The domain bnbtrendings.live was registered on 2026-02-25 through Hostinger Operations, UAB and is delegated to the Cloudflare nameservers osmar.ns.cloudflare.com and sima.ns.cloudflare.com. DNS resolution points to IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate is presented; the site served only HTTP, which is consistent with the current offline status reported by monitoring tools. The only visible page title returned from the host is “Dex Screener”, indicating an attempt to masquerade as the legitimate Dex Screener analytics service.

The threat classification supplied by the intelligence feed labels the activity as a crypto-scam, a common vector for credential harvesting or malicious wallet redirection. VirusTotal recorded a single positive detection out of 93 scanners, confirming that at least one security engine identified malicious behavior. The domain appears on three public blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the consensus that it is being used for phishing-related purposes. Evidence is limited to infrastructure attributes; no content snapshot, JavaScript payload, or phishing page structure has been captured, so the exact user‑facing tactics remain uncertain.

Defenders should continue to block the domain at perimeter filters, enforce DNS sink‑holing for the associated IP range, and monitor for any future re‑hosting attempts that might reuse the same certificate‑less Cloudflare edge. Threat‑intel platforms should update indicators of compromise to include the domain name, registration details, and the resolved IP address. Because the site is presently offline, active response is limited to preventive controls, but continuous re‑assessment is advised in case the actor reactivates the domain or migrates to a new host.