bnbtrustwallet[.]com

Analysis indicates that the domain bnbtrustwallet.com is actively serving content and returns HTTP status code 200, confirming the presence of a reachable web server. Registration data shows the domain was created through GoDaddy.com, LLC and is using the generic parking name servers byte.dns-parking.com and pixel.dns-parking.com, a pattern commonly observed in malicious infrastructure that leverages inexpensive registration services. The domain is currently listed on three independent security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a high‑risk crypto‑drainer.

VirusTotal scans have recorded that 13 of 91 antivirus and URL‑reputation engines flagged the domain as malicious, providing additional independent corroboration of its threat status. The blocklist entries and the multi‑vendor detections collectively suggest that the site is being used to lure cryptocurrency users, likely attempting to harvest private keys or redirect transactions to attacker‑controlled wallets. However, public evidence such as the exact page title, SSL certificate details, or the specific phishing kit employed has not been disclosed, leaving the precise attack flow uncertain.

Defenders should continue to block the domain at perimeter firewalls, DNS filtering solutions, and endpoint protection products. Monitoring for any new resolution changes or additional hosting infrastructure is advisable, as the operators may shift to alternative name servers or registrars to evade takedown. Organizations that interact with Binance Smart Chain wallets or the Binance Trust Wallet application should treat any unsolicited communications referencing bnbtrustwallet.com as malicious, and users should be instructed to verify URLs against official sources before entering credentials or signing transactions.