bnbscan[.]pro

This domain, bnbscan.pro, is flagged as a generic phishing site designed to impersonate a Binance blockchain explorer. Analysis indicates it likely aims to deceive cryptocurrency users by presenting a fraudulent interface for wallet connections or transaction verifications, potentially leading to credential theft or unauthorized fund transfers. No specific drainer kit has been identified at this stage, but the domain’s structure and naming convention strongly suggest an intent to exploit trust in legitimate Binance services. Infrastructure analysis reveals the domain was registered on April 26, 2026, through HOSTINGER operations, UAB, and currently resolves to the IP address 104.21.17.222, associated with AS13335 Cloudflare, Inc. in the United States. Despite its active status, the domain has not yet been flagged by major detection engines, as evidenced by a VirusTotal score of 0/95. It appears on only one security blocklist, and no SSL certificate is present, which is atypical for legitimate financial or cryptocurrency-related services. Google Safe Browsing (GSB) has not yet listed the domain, further reducing its immediate visibility to automated defenses. As of the latest assessment, bnbscan.pro remains active and poses a residual risk to unsuspecting users, particularly those unfamiliar with legitimate Binance-affiliated domains. The lack of widespread detection suggests the campaign may still be in its early stages or employing evasion techniques. Users are advised to verify domain authenticity by cross-referencing official Binance communications and avoiding interaction with unsecured or recently registered domains mimicking blockchain explorers. Organizations should monitor for connections to 104.21.17.222 and consider preemptive blocking of the domain to mitigate potential credential harvesting or financial fraud.