other · KY

Binance

Binance Holdings Ltd.

Cryptocurrency exchange (binance.com; Binance.US is a separate operator).

Primary official domain
binance.com
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
DomainSpoof directory · Suggest a correction
Matching domains, 30 days
231
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
1
domains first source-reported within 30 days
First observed, 30 days
240
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
Not checked
No email-policy check yet

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
binance
Label aliases
Binance
Official domains
binance.com (all)
Generated spellings
106 tracked · 76 observed somewhere · 30 not observed (all)
Can receive mail
10 spellings and 20 reported domains publish MX records · mail at Above.com parking (parking placeholder) 5 · Google 4 · GoDaddy 3 · 15 more (76 spellings and 231 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
jys[.]binancexx[.]comMail: SPF · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive13.248.169.48Amazon Web ServicesAmazon Web Services (AS16509) · USa904c694c05102f30.awsglobalaccelerator.com76.223.54.146Amazon Web ServicesAmazon Web Services (AS16509) · USa904c694c05102f30.awsglobalaccelerator.comchecked 2026-10-19 12:00 UTC
1 source · 1 recordDetails
binancez[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.24.65CloudflareCloudflare (AS13335) · US172.67.217.82CloudflareCloudflare (AS13335) · US2606:4700:3030::6815:1841CloudflareCloudflare (AS13335) · US2606:4700:3031::ac43:d952CloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
binancezh[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive154.19.231.31 · Confirmed phishing host address (DomainSpoof, 14 days)FD-298-8796 (AS8796) · USchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
www[.]binancezh[.]infoMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive170.33.96.17 · Confirmed phishing host address (DomainSpoof, 14 days)ASEPL-AS-AP Alibaba Cloud Singapore Private Limited (AS134963) · SGchecked 2026-10-19 10:55 UTC
1 source · 1 recordDetails
binancezk[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
binanv-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive179.61.182.48 · Confirmed phishing host address (DomainSpoof, 14 days)HKISP-AS-AP OWGELS INTERNATIONAL CO., LIMITED (AS153656) · HKchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
bing-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.78.55CloudflareCloudflare (AS13335) · US172.67.216.245CloudflareCloudflare (AS13335) · US2606:4700:3033::6815:4e37CloudflareCloudflare (AS13335) · US2606:4700:3033::ac43:d8f5CloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
binance[.]bis-app[.]comMail: SPF · Confirmed phishing host address (DomainSpoof, 14 days)DMARC · checked 2026-10-19DMARC policy none (monitor only)
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive103.7.8.199 · Confirmed phishing host address (DomainSpoof, 14 days)EXABYTES-AS-AP Exabytes Network Singapore Pte. Ltd. (AS38532) · SGdurianbentong.netchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
block-binance[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.6.67CloudflareCloudflare (AS13335) · US172.67.134.146CloudflareCloudflare (AS13335) · US2606:4700:3033::6815:643CloudflareCloudflare (AS13335) · US2606:4700:3037::ac43:8692CloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
bni-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive45.87.43.62 · Confirmed phishing host address (DomainSpoof, 14 days)SPECTRAIP SpectraIP B.V. (AS62068) · NL45-87-43-62.static.spectraip.netchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
btc2-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.12.47CloudflareCloudflare (AS13335) · US172.67.193.169CloudflareCloudflare (AS13335) · US2606:4700:3030::ac43:c1a9CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:c2fCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
btcb-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.8.2CloudflareCloudflare (AS13335) · US172.67.156.147CloudflareCloudflare (AS13335) · US2606:4700:3030::6815:802CloudflareCloudflare (AS13335) · US2606:4700:3037::ac43:9c93CloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
buyp2p-binance[.]comMail: MXDMARC · checked 2026-10-19mail at STRATO (web / mail hosting) · DMARC policy reject
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive212.227.222.67 · Confirmed phishing host address (DomainSpoof, 14 days)IONOSIONOS (AS8560) · DEcdn-212-227-222-67.elastic-ssl.ui-r.com2001:8d8:fe::67IONOSIONOS (AS8560) · DEcdn-2001-08d8-00fe-0000-0000-0000-0000-0067.elastic-ssl.ui-r.comchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
bve-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive43.240.28.17 · Confirmed phishing host address (DomainSpoof, 14 days)SONDERCLOUDLIMITED-AS-AP SonderCloud Limited (AS133199) · HKchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
bvt-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive43.240.30.235 · Confirmed phishing host address (DomainSpoof, 14 days)SONDERCLOUDLIMITED-AS-AP SonderCloud Limited (AS133199) · HKchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
bvw-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive43.240.28.24 · Confirmed phishing host address (DomainSpoof, 14 days)SONDERCLOUDLIMITED-AS-AP SonderCloud Limited (AS133199) · HKchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
cdnbinance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.95.55CloudflareCloudflare (AS13335) · US172.67.143.72CloudflareCloudflare (AS13335) · US2606:4700:3031::ac43:8f48CloudflareCloudflare (AS13335) · US2606:4700:3034::6815:5f37CloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
claim-binance[.]bestMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
binance[.]coke-twitter[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive107.174.39.191 · Confirmed phishing host address (DomainSpoof, 14 days)ColoCrossingColoCrossing (AS36352) · US107-174-39-191-host.colocrossing.comchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
com-binance[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive179.61.182.48 · Confirmed phishing host address (DomainSpoof, 14 days)HKISP-AS-AP OWGELS INTERNATIONAL CO., LIMITED (AS153656) · HKchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
communityvotebinance[.]xyzMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:49 UTC
1 source · 1 recordDetails
communityvoterbinance[.]funMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive193.233.82.162 · Confirmed phishing host address (DomainSpoof, 14 days)-Reserved AS- (AS209207) · RUchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
connect-binance[.]bestMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.85.46CloudflareCloudflare (AS13335) · US172.67.202.74CloudflareCloudflare (AS13335) · US2606:4700:3034::6815:552eCloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:ca4aCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
cross-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive168.222.65.180 · Confirmed phishing host address (DomainSpoof, 14 days)HKISP-AS-AP OWGELS INTERNATIONAL CO., LIMITED (AS153656) · HKchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
data24-binance[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive156.254.7.181 · Confirmed phishing host address (DomainSpoof, 14 days)CLOUDIE-AS-AP Cloudie Limited (AS55933) · HKchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.