binance-intl[.]com

The domain binance-intl.com has been identified as a confirmed brand impersonation site specifically targeting the Binance cryptocurrency exchange. This domain is currently offline, but its previous activity posed a significant threat to users who may have encountered it during its active period. The site was designed to deceive visitors into believing they were interacting with legitimate Binance services, potentially leading to credential theft or financial loss.

PhishDestroy analysis reveals that binance-intl.com was created on April 28, 2026, and resolved to the IP address 176.123.1.175. The domain was registered through Fewmoretaps OU d/b/a Trustname.com, a registrar that has been associated with other questionable domains. It appeared on one security blocklist and was flagged by Google Safe Browsing as a phishing site. VirusTotal data shows that 9 out of 95 security vendors flagged this domain as malicious, indicating a moderate but clear threat. Additionally, the domain was found in one AlienVault OTX threat intelligence pulse, and its SSL certificate was issued by Let's Encrypt (E7), which is commonly used by both legitimate and malicious sites.

Given that binance-intl.com is now offline, the immediate risk is reduced, but users should remain vigilant. Anyone who may have visited this site and entered credentials should change their Binance account passwords immediately and enable two-factor authentication. It is also advisable to monitor accounts for any unauthorized activity. PhishDestroy recommends always verifying domain authenticity by checking the official Binance website URL and avoiding unsolicited links that claim to be from cryptocurrency platforms.