bpdrop[.]app

PhishDestroy identifies bpdrop.app as an active crypto drainer site designed to steal cryptocurrency assets from unsuspecting users. The domain leverages deceptive branding to trick victims into connecting wallets or submitting seed phrases, resulting in irreversible financial losses. Current threat status is elevated, with confirmed malicious activity and active hosting infrastructure.

This domain was flagged by 2 of 95 VirusTotal security vendors, indicating limited but credible detection coverage. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolves to IP address 104.21.18.199, and was created on March 22, 2026. A valid SSL certificate issued by Let’s Encrypt suggests an attempt to appear legitimate, despite its malicious nature. The low detection ratio highlights the need for proactive threat intelligence, as traditional antivirus engines may miss this threat.

The current status of bpdrop.app remains active, posing an immediate risk to cryptocurrency users who may encounter the domain through social engineering or phishing campaigns. PhishDestroy recommends immediate blocking of this domain at the network and endpoint levels. Users are strongly advised to verify any unsolicited links or domains using PhishDestroy’s verification tools before interacting. Additionally, organizations should update firewall and DNS filtering rules to include this domain and its associated IP. Continuous monitoring of this domain is critical due to its recent registration and evolving threat tactics.