bingxinvestments[.]com

This domain is flagged as a high-risk phishing resource specifically targeting cryptocurrency users through brand impersonation. Analysis indicates the site mimics BingX, a legitimate digital asset exchange, with the intent to harvest login credentials and facilitate unauthorized asset transfers. The threat type is classified as a crypto drainer, where victims are tricked into connecting wallets to malicious smart contracts, leading to irreversible fund theft. Infrastructure analysis reveals the domain bingxinvestments.com was registered on March 05, 2026, through Hello Internet Corp, a registrar frequently associated with malicious domains. It resolves to the IP address 45.59.124.224 and is hosted on a server running Ubuntu with Nginx, alongside frontend technologies such as Slick, jQuery Migrate, and jQuery. Detection metrics show the domain is flagged by 15 out of 95 security vendors on VirusTotal, while Gridinsoft assigns a trust score of 0/100. The domain appears on three security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL, further corroborating its malicious nature. The page title, BingX Invest, directly impersonates the legitimate platform, reinforcing the phishing intent. Mitigation against this threat requires immediate action from both end users and network administrators. Users should verify domain authenticity by cross-referencing official exchange URLs and enabling multi-factor authentication on all accounts. Wallet providers and exchanges are advised to proactively block interactions with the domain and its associated IP address. Network-level protections, such as DNS filtering and endpoint detection rules, should be implemented to prevent access. Given the domain’s offline status, monitoring for re-emergence under similar naming conventions or infrastructure is recommended, as threat actors often reuse registrars and hosting providers for subsequent campaigns.