bnparibaspl[.]com

This domain, bnparibaspl.com, is a fraudulent site that impersonates Google as part of a tech support scam. It was registered on August 7, 2025, through Web Commerce Communications Limited (WebNic.cc) and resolved to IP address 107.173.193.235, hosted on AS36352 (HostPapa) in the United States. The page title observed was 'Welcome | BNP Paribas Polska SA', indicating an attempt to present a fake banking interface or a generic landing page for the scam. Security analysis tools gave this domain the lowest possible trust ratings: Scamadviser scored it 1/100 and Gridinsoft scored it 0/100.

VirusTotal flagged the domain as malicious, with 8 out of 93 security vendors marking it as a threat, and it appeared on one security blocklist. AlienVault OTX recorded the domain in three threat intelligence pulses, and it was blocked by PhishDestroy. The domain used an R11 SSL certificate.

The site is now offline as of the report date, July 24, 2026. Defenders should ensure any URLs or email links containing this domain are blocked and investigate any user interactions or credentials that may have been submitted to the site while it was active. The exact page content and any data capture mechanisms remain unconfirmed, but the combination of low trust scores, vendor detections, and blocklist presence confirms this was a hostile domain used for brand impersonation and fraud.