sand1-bnb-bep20[.]vercel[.]app

Sand1-bnb-bep20.vercel.app was observed on a security blocklist at least once and is actively listed by PhishDestroy as a malicious resource. VirusTotal scans have returned detections from seven of ninety‑one AV engines, indicating that at least a subset of the scanning community classifies the site as malicious. The presence on a blocklist and the multi‑engine detections collectively substantiate a high confidence that the domain is being used for phishing or related credential‑ harvesting activities.

No public WHOIS record, IP address, or hosting ASN information has been disclosed in the available intelligence, so the underlying infrastructure cannot be fully profiled at this time. The lack of detailed page‑title or brand references also limits the ability to correlate the payload with a specific victim‑targeting campaign. Defenders should treat the domain as hostile: it should be added to network and DNS deny lists, URL filtering rules, and endpoint protection exclusions should be updated to block any outbound connections to the host.

Continuous monitoring of threat‑intel feeds for additional indicators, such as newly observed IPs or associated domains, is advised. Organizations that employ email or web gateway controls should ensure that traffic to sand1‑bnb‑bep20.vercel.app is inspected and blocked, and that users are educated about the presence of a confirmed phishing site linked to this domain.