bnbswap[.]digital

The domain bnbswap.digital is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform Across. It presents itself as a 'BNB Swap | Multi-Chain Instant Exchange' to deceive victims into connecting wallets, posing an elevated risk of wallet-draining attacks. As of the latest verification, bnbswap.digital has been taken offline, though it previously operated without an associated drainer kit.

Technical analysis shows bnbswap.digital was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar, with a Gridinsoft trust score of 0/100. The domain appears on 5 security blocklists, including PhishDestroy, ScamSniffer, and Polkadot, and is registered through Cloudflare, Inc. It resolves to the IP address 188.114.96.3, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate was observed, and the domain uses Cloudflare nameservers (colin.ns.cloudflare.com and tricia.ns.cloudflare.com). The HTTP status returned a 429 error at the time of assessment, and no creation date is available.

Users who interacted with bnbswap.digital should immediately revoke any token approvals granted to the site and transfer funds to a new wallet to mitigate potential losses. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand (Across) to aid in takedown efforts. If financial loss occurred, file a report with local cybercrime authorities or organizations such as IC3 (for US victims) or Action Fraud (UK).