shareupincome[.]com

The domain shareupincome.com is a cryptocurrency phishing site that impersonates the Binance brand, posing an elevated risk of brand impersonation scams. It was designed to deceive users into believing they were interacting with a legitimate Binance platform, potentially leading to financial loss through fraudulent transactions. No drainer kit was identified in this campaign. As of the latest verification, shareupincome.com has been taken offline.

Technical indicators confirm the malicious nature of shareupincome.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned it a trust score of 0 out of 100. It appears on one security blocklist, PhishDestroy, and was registered through Tucows Domains Inc. on April 26, 2025. The domain resolved to the IP address 163.61.188.5, hosted under AS153568 (NEW DHAKA HARDWARE) in the US, with an SSL certificate issued by R10. The observed page title was 'Share Up Income'. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with shareupincome.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new cryptocurrency wallet. If login credentials were entered, change passwords for all associated accounts, enable two-factor authentication, and monitor for unauthorized transactions. Report the phishing domain to Binance’s official security team and submit it to platforms like PhishTank or Google Safe Browsing for broader protection.