binancemoney[.]shop

The domain binancemoney.shop is a confirmed phishing site engaged in brand impersonation targeting Binance, a major cryptocurrency exchange. It presents itself as a legitimate Binance platform to deceive users into disclosing sensitive information or transferring cryptocurrency, categorizing it as a cryptocurrency scam. As of the latest verification, binancemoney.shop has been taken offline, though it previously operated without a known drainer kit.

Technical analysis of binancemoney.shop reveals minimal detection at the time of assessment, with 0 of 95 VirusTotal vendors flagging the domain. The domain was created on February 21, 2026, and resolved to the IP address 157.173.209.99, hosted by AS47583 Hostinger International Limited in the US. It appears on one security blocklist, PhishDestroy, and uses an SSL certificate issued by ZeroSSL RSA Domain Secure Site CA. The observed page title was 'Bot Verification', a common tactic to evade automated security scans.

Users who interacted with binancemoney.shop should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency accounts and change passwords if credentials were entered. Monitor accounts for unauthorized transactions and report the phishing domain to Binance’s official abuse channels, as well as platforms like Google Safe Browsing, PhishTank, or local cybercrime units for further investigation.