bing-x[.]one

This domain, bing-x.one, is flagged as an active cryptocurrency wallet phishing site designed to harvest user credentials and drain digital assets. Analysis indicates the infrastructure mimics legitimate cryptocurrency exchange interfaces, likely deploying a wallet drainer kit to execute unauthorized transactions. The domain exhibits no direct brand affiliation but employs social engineering tactics to deceive users into disclosing private keys or seed phrases. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 206.119.87.64, hosted on AS140227 (Hong Kong Communications International Co., Limited). It was registered on May 26, 2026, through Gname.com Pte. Ltd., with a Let's Encrypt SSL certificate (YR2). VirusTotal detection shows 1/95 security vendors flagging the domain, while it appears on three independent security blocklists. The domain's creation date is notably in the future, suggesting potential data manipulation or typosquatting tactics. Current status remains active, with no evidence of takedown or mitigation. The domain is blocked by multiple security entities, yet the hosting infrastructure persists, maintaining a high risk of continued exploitation. Users are advised to avoid interaction, verify SSL certificates, and cross-reference domain registration details before engaging with cryptocurrency-related platforms. The remaining risk is elevated due to the domain's persistence, low detection rate, and targeted phishing methodology.