other · KY
Binance
Binance Holdings Ltd.
Cryptocurrency exchange (binance.com; Binance.US is a separate operator).
- Primary official domain
- binance.com
- Reviewed official domains
- 1 (directory review; organization has not verified)
- Directory source
- DomainSpoof directory · Suggest a correction
Matching domains, 30 days
231
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
1
domains first source-reported within 30 days
First observed, 30 days
240
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC quarantine
SPF -all · 2/10 lookups · Mail: Receives mail (5 MX hosts) · checked 2026-10-19 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- binance
- Label aliases
- Binance
- Official domains
- binance.com (all)
- Generated spellings
- 106 tracked · 76 observed somewhere · 30 not observed (all)
- Can receive mail
- 10 spellings and 20 reported domains publish MX records · mail at Above.com parking (parking placeholder) 5 · Google 4 · GoDaddy 3 · 15 more (76 spellings and 231 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
| Rare tokens and source labels | ||||||
bic-binance[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyAbsent from latest snapshot | Possible associationBrand in hostname | 2026-10-18Observed in feed | No address recordschecked 2026-10-19 04:48 UTC | 1 source · 1 record | Details |
cnap-binance[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyAbsent from latest snapshot | Possible associationBrand in hostname | 2026-10-18Observed in feed | No address recordschecked 2026-10-19 04:48 UTC | 1 source · 1 record | Details |
binance[.]ooo[.]ec[.]ccMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyAbsent from latest snapshot | Possible associationBrand in hostname | 2026-10-18Observed in feed | No address recordschecked 2026-10-19 04:48 UTC | 1 source · 1 record | Details |
usda-binance[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyAbsent from latest snapshot | Possible associationBrand in hostname | 2026-10-18Observed in feed | No address recordschecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
binance-account-login[.]vercel[.]appMail: SPFDMARC · checked 2026-10-19DMARC policy reject | Reported by PhishTankPresent in latest snapshot | Strong matchBrand in hostname | 2026-10-11Source reported | Alive216.198.79.195Amazon Web ServicesAmazon Web Services (AS16509) · US64.29.17.195Amazon Web ServicesAmazon Web Services (AS16509) · USchecked 2026-10-19 16:55 UTC | 1 source · 1 record | Details |
| Token inside a longer word | ||||||
loginbinancetr[.]comMail: MX · checked 2026-10-19mail at Dynadot parking (parking placeholder) | Listed by PhishDestroyAbsent from latest snapshot | Possible associationBrand in hostnameToken inside a longer word | 2026-10-18Observed in feed | Alive31.56.209.3 · Confirmed phishing host address (DomainSpoof, 48 hours), Emerging Threats open block list, Spamhaus DROP (credit: The Spamhaus Project)COM4-ASN-2 (AS209373) · USchecked 2026-10-19 16:55 UTC | 1 source · 1 record | Details |
231 registrable domains · 234 hostnames · page 10 of 10← Previous
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.