other · KY

Binance

Binance Holdings Ltd.

Cryptocurrency exchange (binance.com; Binance.US is a separate operator).

Primary official domain
binance.com
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
DomainSpoof directory · Suggest a correction
Matching domains, 30 days
231
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
1
domains first source-reported within 30 days
First observed, 30 days
240
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC quarantine
SPF -all · 2/10 lookups · Mail: Receives mail (5 MX hosts) · checked 2026-10-19 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
binance
Label aliases
Binance
Official domains
binance.com (all)
Generated spellings
106 tracked · 76 observed somewhere · 30 not observed (all)
Can receive mail
10 spellings and 20 reported domains publish MX records · mail at Above.com parking (parking placeholder) 5 · Google 4 · GoDaddy 3 · 15 more (76 spellings and 231 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
bic-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyAbsent from latest snapshot
Possible associationBrand in hostname
2026-10-18Observed in feed
No address recordschecked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
cnap-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyAbsent from latest snapshot
Possible associationBrand in hostname
2026-10-18Observed in feed
No address recordschecked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
binance[.]ooo[.]ec[.]ccMail: No mail records · checked 2026-10-19
Listed by PhishDestroyAbsent from latest snapshot
Possible associationBrand in hostname
2026-10-18Observed in feed
No address recordschecked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
loginbinancetr[.]comMail: MX · checked 2026-10-19mail at Dynadot parking (parking placeholder)
Listed by PhishDestroyAbsent from latest snapshot
Possible associationBrand in hostname
2026-10-18Observed in feed
Alive31.56.209.3 · Confirmed phishing host address (DomainSpoof, 48 hours), Emerging Threats open block list, Spamhaus DROP (credit: The Spamhaus Project)COM4-ASN-2 (AS209373) · USchecked 2026-10-19 10:55 UTC
1 source · 1 recordDetails
usda-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyAbsent from latest snapshot
Possible associationBrand in hostname
2026-10-18Observed in feed
No address recordschecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
binance-account-login[.]vercel[.]appMail: SPFDMARC · checked 2026-10-19DMARC policy reject
Reported by PhishTankPresent in latest snapshot
Strong matchBrand in hostname
2026-10-11Source reported
Alive216.198.79.3Amazon Web ServicesAmazon Web Services (AS16509) · US64.29.17.3Amazon Web ServicesAmazon Web Services (AS16509) · USchecked 2026-10-19 10:55 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.