# bnbgate.pages.dev — SUSPICIOUS

> bnbgate.pages.dev operates as a generic phishing domain with 0/95 VirusTotal detections targeting crypto users. Immediate check via trusted sources recommended.

## Summary
PhishDestroy identifies bnbgate.pages.dev as a newly active crypto drainer phishing domain under investigation, hosted on Cloudflare Pages. This domain mimics legitimate binance-branded gateways to trick users into connecting crypto wallets or entering withdrawal credentials, enabling immediate asset theft. While no specific drainer kit signature has been publicly released, the page likely uses deceptive frontend prompts and fake transaction overlays to capture private keys or sign malicious approvals. Users who interact with this domain risk irreversible loss of stored assets across multiple blockchain networks.  This domain was flagged with zero detections across 95 VirusTotal engines as of the latest scan, suggesting low antivirus coverage despite its malicious intent. It was registered via Cloudflare, Inc. through Cloudflare Pages on an unknown date, resolving to IP 188.114.96.3 with a valid Google Trust Services SSL certificate. No record of this IP appears in the Google Safe Browsing (GSB) blocklist, and third-party threat intelligence databases (including OpenPhish and URLVoid) show no prior listings or community reports. This suggests a recently deployed infrastructure operating below current detection thresholds, increasing the risk to early victims.  As of this report, bnbgate.pages.dev remains active and unblocked by mainstream security platforms. PhishDestroy has escalated this case to multiple threat intelligence networks for inclusion in browser blocklists and takedown requests. Users are advised to avoid accessing this domain or interacting with any associated links. If you have visited this site, disconnect your wallet immediately, revoke any unauthorized permissions, and transfer remaining funds to a clean wallet. Monitor official Binance channels only at binance.com for legitimate withdrawal and deposit processes.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/bnbgate.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/bnbgate.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/bnbgate.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bnbgate.pages.dev/
Last updated: 2026-04-09