bingxpro[.]app

PhishDestroy identifies bingxpro.app as an active crypto drainer impersonating the legitimate exchange BingX. The domain leverages brand impersonation to deceive users into connecting cryptocurrency wallets or submitting login credentials, enabling the theft of digital assets. This is a high-risk threat vector given the irreversible nature of crypto transactions and the sophistication of modern drainer scripts. Users interacting with this domain expose themselves to unauthorized fund transfers and credential harvesting. PhishDestroy flags bingxpro.app as a domain registered through GoDaddy.com, LLC on August 12, 2022, resolving to IP address 18.64.211.81. The domain uses an Amazon-issued SSL certificate, which does not guarantee legitimacy. VirusTotal currently reports 1 out of 95 security engines detecting malicious content, indicating it remains under the radar of major blocklists. There are no current reports of this domain being present on widely used threat intelligence feeds such as URLVoid, PhishTank, or OpenPhish. The domain’s recent creation date and low detection rate suggest it may be a newly deployed threat actively targeting unsuspecting users. Mitigation steps are critical for users who may have interacted with bingxpro.app. Immediately disconnect any connected cryptocurrency wallets and revoke permissions through your wallet’s interface. Do not log in or enter any credentials on the site. If you have already entered sensitive information, change all associated passwords and enable two-factor authentication on your legitimate exchange accounts. Report the domain to your antivirus provider and consider using browser-based tools like uBlock Origin with anti-phishing filters. Forward any suspicious URLs to abuse@bingx.com and report the domain to Google Safe Browsing or your national cybersecurity authority to aid in future takedowns.