wwu[.]bnsa[.]click

Analysis of the domain wwu.bnsa.click indicates it was a phishing site active since February 21, 2026, and taken offline by July 24, 2026. The domain resolved to IP 188.114.96.3, hosted on Cloudflare infrastructure (AS13335) in the United States. SSL certificate WE1 was assigned, though no specific brand or service impersonation is confirmed from available data.

Detection metrics show the domain appeared on one security blocklist and was blocked by PhishDestroy. VirusTotal scans flagged the domain as malicious by 15 of 95 security vendors, though the exact nature of the phishing content remains unconfirmed due to the site's offline status. Gridinsoft assigned a trust score of 20 out of 100, reinforcing the elevated risk classification.

Defenders should treat this domain as compromised infrastructure and block both the domain and its resolved IP at perimeter controls. No evidence links the domain to a specific phishing kit or targeted brand, so monitoring for reuse of the IP or SSL certificate is recommended. The short lifespan (under five months) aligns with typical phishing domain rotation patterns.