# bnbcapital.ravion.pro — SUSPICIOUS

> PhishDestroy warns that bnbcapital.ravion.pro is a live crypto drainer mimicking Binance; VirusTotal shows 0/95 detections. Verify before you click.

## Summary
The domain bnbcapital.ravion.pro has been flagged by PhishDestroy as an active crypto drainer impersonating Binance, placing users’ assets at immediate risk. Data indicates this impersonation site is currently resolving to IP 46.202.186.25 and is secured with a Let’s Encrypt SSL certificate; VirusTotal results show 0 detections out of 95 engines as of the latest scan. The domain’s infrastructure and configuration are undergoing deeper behavioral analysis to determine additional fraudulent patterns, but early indicators point to a campaign targeting cryptocurrency holders through deceptive Binance branding.


PhishDestroy identifies this site as a medium-stage crypto drainer, likely designed to trick users into connecting wallets or entering seed phrases under the guise of a legitimate Binance investment platform. The domain was registered recently and has not yet appeared on major blocklists or threat intelligence feeds, contributing to a ‘under_investigation’ risk status despite signs of operational activity. Specific technical markers include a low global trust score due to anonymity in WHOIS data, fast flux DNS rotation via Cloudflare-based resolvers, and dynamic redirection to phishing subpages hosted on the same IP block (46.202.186.0/24).


To mitigate exposure, users should avoid visiting bnbcapital.ravion.pro entirely. If you’ve already interacted with the site, immediately revoke any connected wallet permissions, transfer funds to a clean wallet, and scan your device for malware using a reputable security tool. PhishDestroy advises verifying suspicious domains against its database and reporting encounters for collective defense. Never enter seed phrases or private keys on unfamiliar platforms, even if SSL certificates appear valid.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 46.202.186.25

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/16671f69-da87-4082-94cb-28b76e749ea1
- PhishDestroy: https://phishdestroy.io/domain/bnbcapital.ravion.pro/
- LLM endpoint: https://phishdestroy.io/domain/bnbcapital.ravion.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bnbcapital.ravion.pro/
Last updated: 2026-03-22