paybnb[.]cc

The domain paybnb.cc is a phishing site engaged in brand impersonation targeting TrustWallet users. It presents itself as a legitimate cryptocurrency compliance solution but is designed to deceive victims into disclosing sensitive information or credentials. No crypto drainer kit was identified in this campaign. The site is currently taken offline, though its prior activity poses an elevated risk to those who may have interacted with it.

Technical indicators confirm paybnb.cc as a malicious domain. As of analysis, 1 of 95 VirusTotal security vendors flagged the domain, specifically Forcepoint ThreatSeeker. The domain was created on February 21, 2026, and resolves to the IP address 185.99.135.177, hosted in the Netherlands under AS60781 (LeaseWeb Netherlands B.V.). It appears on 1 security blocklist, PhishDestroy, and holds a Gridinsoft trust score of 0/100. The SSL certificate is issued by E6, and the observed page title was 'TrustWallet - The full-fledged crypto compliance solution'.

Individuals who visited paybnb.cc should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or fraudulent activity. If cryptocurrency wallet details were exposed, revoke any token approvals and consider transferring funds to a new wallet. Report the domain to relevant platforms such as Google Safe Browsing, the Anti-Phishing Working Group (APWG), or local cybersecurity authorities to aid in mitigation efforts.