binanceweb3[.]bet

PhishDestroy identifies a live brand-impersonation campaign targeting Binance users via the domain binanceweb3.bet. The malicious site masquerades as the official BNB Wallet login portal, aiming to harvest private keys or seed phrases under the guise of securing crypto assets. Users who land on this page are prompted to connect wallets or enter credentials, directly exposing funds to theft. The domain resolves to 94.154.35.90 and currently displays an SSL certificate issued by Let’s Encrypt, adding superficial legitimacy that deceives security tools and victims alike. This domain was flagged by PhishDestroy with unique seed e73e58 and shows zero detections on VirusTotal out of 95 scanners as of the latest scan. It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 7, 2026, making it a recently activated threat with minimal historical reputation. Its malicious infrastructure remains undetected by most antivirus engines, allowing it to operate with near-immunity from automated blocking. This low-profile status increases the risk of successful compromise for unsuspecting users who may access the site through phishing links, typo-squatted URLs, or malvertising campaigns. Users who visited binanceweb3.bet should immediately disconnect any connected wallets, revoke any exposed API keys or permissions via their wallet settings, and run a full malware scan. Do not enter any credentials or private phrases on this site. Report the domain to your browser’s safe-browsing program and block it at the network level if possible. Monitor your blockchain addresses for unauthorized transactions and consider transferring remaining funds to a cold wallet until the domain is widely blacklisted. Exercise heightened caution with any Binance-branded domains created within the past 30 days, especially those claiming to offer wallet access or security updates.