bnbvolumebot[.]net

This domain, www.bnbvolumebot.net, was registered on February 21, 2026, through Name.com, Inc. and is currently active. Analysis indicates it is operating as a crypto scam, specifically targeting users with a fraudulent service claiming to amplify token trading volume on the BNB Chain, as evidenced by the page title 'BNB Volume Bot - Amplify Your Token's Trading Volume on BNB Chain.' The domain resolves to IP address 188.114.97.3, hosted on Cloudflare's infrastructure (AS13335) in the US, and employs Cloudflare nameservers (aitana.ns.cloudflare.com, henry.ns.cloudflare.com) alongside HTTP/3 technology. A 301 HTTP status suggests a redirect mechanism, though the destination remains unconfirmed. The SSL certificate is issued by Google Trust Services (WE1), a common but not inherently malicious provider.

Detection data is limited but notable: two of 93 security vendors on VirusTotal flag the domain, and it appears on one security blocklist (PhishDestroy). AlienVault OTX includes the domain in a single threat intelligence pulse, indicating prior identification by at least one security community source. The domain's infrastructure and registration details do not deviate significantly from legitimate services, but the combination of a crypto-related scam theme, minimal detection coverage, and Cloudflare hosting aligns with common phishing tactics.

Defenders should treat this domain as high-risk due to its active status, confirmed presence on blocklists, and association with a known scam type. Recommended actions include blocking the domain and IP at network and endpoint levels, monitoring for related infrastructure (e.g., subdomains or adjacent IPs), and alerting users to the fraudulent BNB Chain bot narrative. Further analysis of the redirect target and any associated wallet addresses or smart contracts could provide additional indicators of compromise.