snapshot-buildonbnb[.]co

The domain snapshot-buildonbnb.co is a cryptocurrency phishing site engaged in brand impersonation targeting Binance users. It presented itself as a '$BOB Build on BNB' platform but was designed to steal credentials or funds through fraudulent login or transaction prompts. No drainer kit was identified. The site is currently taken offline.

Technical indicators confirm the elevated risk. snapshot-buildonbnb.co was flagged by 1 of 95 VirusTotal security vendors, including alphaMountain.ai, and appeared on 2 security blocklists (PhishDestroy and ScamSniffer). The domain was created on February 21, 2026, and resolved to IP address 172.67.147.107, hosted on Cloudflare's network (AS13335) in the US. The SSL certificate was issued by WE1, and the observed page title was '$BOB Build on BNB'. Gridinsoft assigned a trust score of 0 out of 100.

Users who interacted with snapshot-buildonbnb.co should immediately change any passwords or credentials entered on the site, enable two-factor authentication, and monitor accounts for unauthorized transactions. If cryptocurrency was involved, revoke any token approvals granted to the site and consider moving funds to a new wallet. Report the domain to relevant platforms, including Binance's official abuse channels, and submit it to additional blocklists or threat-intelligence feeds to prevent further exploitation.