bounebit[.]io

PhishDestroy identifies bounebit.io as an active crypto drainer scam actively harvesting cryptocurrency wallet credentials and assets. This domain was flagged on December 17, 2025, and registered through Dynadot Inc, resolving to IP address 188.114.96.3. The domain operates with a legitimate Let's Encrypt SSL certificate to appear trustworthy while deploying deceptive wallet connection prompts that siphon funds to attacker-controlled addresses. This domain poses a significant threat by impersonating legitimate crypto services to trick users into connecting their wallets under false pretenses. Evidence supporting its malicious intent includes zero detections on VirusTotal (3/95 scanners) as of discovery, despite active deployment. The domain's recent creation date and hosting infrastructure suggest a hastily deployed operation designed to evade early detection systems. Users who interact with this domain risk irreversible cryptocurrency losses through automated fund transfers triggered by malicious smart contracts or browser extensions. If you visited bounebit.io, immediately revoke any wallet connections through your wallet provider's interface and transfer remaining assets to a clean wallet. Scan your device for malware using reputable security software and consider rotating all API keys and private credentials exposed during the session. Report the domain to your wallet provider and local cybercrime units to help disrupt this operation and protect other potential victims from similar crypto drainer attacks.