bnbeth[.]vip

The domain bnbeth.vip was registered on February 21, 2026 through Gname.com Pte. Ltd. and is currently listed as offline. Infrastructure analysis shows that the domain resolves to the IP address 104.21.36.196, which is owned by Cloudflare, Inc. (AS13335) and located in the United States. The authoritative nameservers are chris.ns.cloudflare.com and ines.ns.cloudflare.com, confirming the use of Cloudflare's DNS services. The site presented a page title in Chinese reading "没有找到站点," indicating that the expected content is not accessible.

The SSL certificate is issued by Google Trust Services under the WE1 certificate profile, providing a valid HTTPS handshake despite the site being offline. Detected technologies include Cloudflare and HTTP/3, suggesting modern delivery mechanisms were in place when the site was active. Reputation checks show a Gridinsoft trust score of 0 out of 100, and the domain is blocked by the PhishDestroy blocklist as well as appearing on a single additional security blocklist. VirusTotal scans recorded two positive detections out of 93 security vendors, reinforcing the malicious classification.

The threat is identified as a crypto‑related scam, though specific details of the fraudulent payload or victim interaction have not been disclosed. Defensive guidance recommends that security teams add bnbeth.vip to URL filtering policies, monitor for DNS queries to its Cloudflare IP range, and ensure that any outbound connections to this domain are denied. Analysts should also flag any future registrations that reuse the same registrar or nameserver pattern for heightened scrutiny, as the infrastructure components are commonly leveraged in phishing campaigns. Continuous observation of threat intelligence feeds for emerging indicators related to this domain is advised.