BnGM1WQ8S1BaRdETTSNL3UyGM8MJVY3bzLRUnuA1U6xH scam

A phishing scam involving cryptocurrency was reported on 12 September 2026. Wallet drainer via phishing site batononpump.com (registered 2026-09-12 15:47 UTC, Dominet HK, Cloudflare). The site impersonates the "baton" meme token on pump.fun and asks to connect a Solana wallet and sign an "eligibility test". The signature is a drainer transaction: on 2026-09-12 at 21:43 UTC it emptied my wallet of all tokens (about 270 USD: 120 USDC + CLORD, MDOG, minecat and one more meme token). The tokens were sent to the attacker collector wallet BnGM1WQ8S1BaRdETTSNL3UyGM8MJVY3bzLRUnuA1U6xH through program U1dJrKjDWL1ZqMC8RrFDWB3dVzHaribCYdQ7d1h8H8K, fees paid by FYmbdfm14U8j6o1uf8ncFh7JBz22KF78K9vzWsvsbMdV (which drained other victims in the same second), then swapped to SOL within 30 seconds. The collector has been active since 2026-08-08 and holds about 22 SOL from victims. Transactions: https://solscan.io/tx/4D18SisGGXBNRxAQ6cNeHTB82rWvoQ3Fto8QKzEpSBGfphE5eVXcGHu4hqAKpyEpiB4MbBeRmRmgwjYuM2upDXht and https://solscan.io/tx/HHYzHspD7EUahxGBwPPajsnZMBu4gtYd7ZxTxDSXcgHX3JB31iommeD2nfsSCa752AozNWCRCLtLYNtv8sdeQQE Wallet addresses linked to this report: solana: BnGM1WQ8S1BaRdETTSNL3UyGM8MJVY3bzLRUnuA1U6xH, U1dJrKjDWL1ZqMC8RrFDWB3dVzHaribCYdQ7d1h8H8K, FYmbdfm14U8j6o1uf8ncFh7JBz22KF78K9vzWsvsbMdV Do not send money or cryptocurrency to anyone connected to this report. If you have already paid, contact your bank or exchange and report the incident to your national fraud authority.