# PhishDestroy domain threat record: binance-cc.com.cn

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/binance-cc.com.cn/
Machine-readable companion: https://phishdestroy.io/domain/binance-cc.com.cn/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 02:27:21 UTC
- Last availability or vendor check: 2026-10-24 10:32:25 UTC
- Stored record updated: 2026-10-24 14:20:55 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Binance

## Stored infrastructure

- Observed IP address: 168.222.65.180
- Registrar in stored WHOIS data: 成都西维数码科技有限公司
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-13 10:05:57 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16694-3cd2-7085-b115-9e79a92022c8/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/binance-cc.com.cn
- Certificate Transparency search: https://crt.sh/?q=%25.binance-cc.com.cn
- Web Archive lookup: https://web.archive.org/web/*/https://binance-cc.com.cn/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s automated intake on 2026-10-23 classified binance-cc.com.cn as malicious because the site impersonates Binance and advertises an “official” Android app download and account registration. The recorded page title reads “币安 Binance 官方下载入口…”, and an HTTP 200 response was recorded on the same date.

How the scam works
In this phishing category attackers host a look‑alike site that copies the branding of a legitimate cryptocurrency exchange and present a download or login portal. Victims who follow the link may be prompted to enter Binance credentials or install a malicious application, enabling credential theft or later account compromise.

Evidence
VirusTotal scanned the domain on 2026-10-23 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked on 2026-10-23 and did not flag the URL. URLScan’s analysis on 2026-10-23 returned a malicious phishing verdict with a score of 100 and identified Binance as the targeted brand. External blocklists MetaMask and SEAL listed the domain, PhishDestroy’s internal blocklist also contains it, OTX recorded two pulses referencing the domain, and Spamhaus DBL showed no listing on 2026-10-23.

Infrastructure
The domain was registered nine days before first sighting, giving it an age of nine days as of 2026-10-23. The TLS certificate issued on 2026-10-13 by LiteSSL RSA CA 2025 was valid until 2027-01-11. The domain was recorded pointing to IP 168.222.65.180, which the network information associated with OWGELS INTERNATIONAL CO., LIMITED in Hong Kong (ASN 153656). Nameservers were ns1.myhostadmin.net and ns2.myhostadmin.net.

What to do
Do not enter Binance credentials or download any application from this site; if credentials were entered, change the Binance password immediately and enable two‑factor authentication. Organizations should block binance-cc.com.cn at the network perimeter, monitor for connections to the recorded IP, and review any accounts that may have interacted with the site, notifying Binance of the attempted credential harvest.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16694-3cd2-7085-b115-9e79a92022c8/
Cloudflare Radar report: https://radar.cloudflare.com/scan/7d57b9a5-f270-4faa-9af1-3e4e007cb3c5
URLQuery report: https://urlquery.net/report/2183882a-1654-4970-8a38-605a58ca59f3
Stored capture screenshot: https://i.ibb.co/7NRYTVHm/a5fe05309963.png
Cloudflare Radar screenshot (2026-10-23T03:02:26Z): https://screenshots.phishdestroy.io/cf/7d57b9a5-f270-4faa-9af1-3e4e007cb3c5.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/2183882a-1654-4970-8a38-605a58ca59f3.png
URLScan screenshot (2026-10-13T09:50:04Z): https://screenshots.phishdestroy.io/us/01a134ab-3310-727f-88ce-a993e0a16d73.png
URLScan capture report: https://urlscan.io/result/01a134ab-3310-727f-88ce-a993e0a16d73/
VirusTotal report: https://www.virustotal.com/gui/domain/binance-cc.com.cn
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=binance-cc.com.cn
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 03:05:54 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/7NRYTVHm/a5fe05309963.png
  Captured: 2026-10-23 02:27:21 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a16694-3cd2-7085-b115-9e79a92022c8.png
  Captured: 2026-10-23 02:27:21 UTC
  Source report: https://urlscan.io/result/01a16694-3cd2-7085-b115-9e79a92022c8/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7d57b9a5-f270-4faa-9af1-3e4e007cb3c5.png
  Captured: 2026-10-23 03:02:26 UTC
  Source report: https://radar.cloudflare.com/scan/7d57b9a5-f270-4faa-9af1-3e4e007cb3c5
  SHA-256: 66d36cc6725340751647c78d9ccfd44ae34bf8b360b97bb437941be0a9b3e381
- URLQuery: https://screenshots.phishdestroy.io/uq/2183882a-1654-4970-8a38-605a58ca59f3.png
  Source report: https://urlquery.net/report/2183882a-1654-4970-8a38-605a58ca59f3
  SHA-256: bdad1a4cfff14bd4da95968b5326e4655a84eb7550662dcc5bbbfe3dc47385cd
- URLScan · 2026-10-13: https://screenshots.phishdestroy.io/us/01a134ab-3310-727f-88ce-a993e0a16d73.png
  Captured: 2026-10-13 09:50:04 UTC
  Source report: https://urlscan.io/result/01a134ab-3310-727f-88ce-a993e0a16d73/
  SHA-256: 1de40d6d0f869c955b4f03f8fd7ea64d52ca3d651c7312400fa9308f738a2df4

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T03:04:58Z",
        "uuid": "01a16694-3cd2-7085-b115-9e79a92022c8",
        "scanned_at": "2026-10-23T02:26:09Z",
        "final_url": "https://binance-cc.com.cn/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://binance-cc.com.cn/",
                "from": "http://binance-cc.com.cn/",
                "status": 307
            }
        ],
        "ip": "168.222.65.180",
        "domains": [
            "www.binance.com"
        ],
        "ips": [
            "52.85.31.31",
            "168.222.65.180"
        ],
        "asns": [
            "16509",
            "153656"
        ],
        "countries": [
            "US",
            "HK"
        ],
        "link_domains": [
            "accounts.binance.com"
        ],
        "doc_hash": "9e187448f57aec5dd6b7c77db28de10d79caf67d2a448ad7e019e2cf32dc8838",
        "tls": {
            "san": [
                "binance-cc.com.cn"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "LiteSSL RSA CA 2025",
            "subject": "binance-cc.com.cn",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-11T02:59:59Z",
            "valid_from": "2026-10-13T03:00:00Z"
        },
        "domain_age_days": 9,
        "apex_age_days": 9,
        "tls_age_days": 9,
        "tls_valid_days": 89,
        "requests": 2,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "binance"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Binance"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T03:05:01Z",
        "uuid": "7d57b9a5-f270-4faa-9af1-3e4e007cb3c5",
        "scanned_at": "2026-10-23T03:02:26Z",
        "final_url": "https://binance-cc.com.cn/",
        "status": 200,
        "history": [
            {
                "url": "https://binance-cc.com.cn/",
                "status": 200
            }
        ],
        "dom_hash": "09a3ca220769d686304eeeadec207e7dcbdd0c4cc67ac760572cc94141e40deb",
        "doc_hash": "9e187448f57aec5dd6b7c77db28de10d79caf67d2a448ad7e019e2cf32dc8838",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Phishing"
        ],
        "domain_risks": [
            "Phishing",
            "Security threats",
            "Newly Seen Domains",
            "Security Risks",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "binance-cc.com.cn",
                "type": "A",
                "value": "168.222.65.180"
            }
        ],
        "dnssec_valid": false,
        "ip": "168.222.65.180",
        "verdict": {
            "tags": [
                "phishing"
            ],
            "malicious": true,
            "categories": [
                "phishing"
            ]
        },
        "whois": {
            "registrar": "成都西维数码科技有限公司",
            "created": "2026-10-13T12:05:57Z",
            "expires": "2027-10-13T12:05:57Z",
            "nameservers": [
                "ns5.west.cn",
                "ns6.west.cn"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T03:01:28Z",
        "analysis_at": "2026-10-23T02:42:44Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 39
        },
        "reputation": 0,
        "created": "2026-10-13T00:00:00Z",
        "first_seen": "2026-10-13T09:28:10Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns1.myhostadmin.net"
            },
            {
                "ttl": 600,
                "type": "A",
                "value": "168.222.65.180"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns2.myhostadmin.net"
            },
            {
                "ttl": 500,
                "type": "SOA",
                "rname": "dnsconct.myhostadmin.net",
                "value": "ns1.myhostadmin.net"
            }
        ],
        "dns_at": "2026-10-23T02:48:08Z",
        "jarm": "3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763",
        "cert": {
            "san": [
                "binance-cc.com.cn"
            ],
            "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
            "serial": "49e36a81581e5df011c279b8f8318ec87ff8f98e",
            "sha256": "4c0b1d7564054869ef71dc4adde96fd72327d528e50022a71b40ec6e22717cd0",
            "subject": "binance-cc.com.cn",
            "valid_to": "2027-01-11T02:59:59Z",
            "valid_from": "2026-10-13T03:00:00Z"
        },
        "whois": []
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T03:05:19Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "binance-cc.com.cn"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-13T11:42:18Z",
            "first": "2026-10-13T11:42:18Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 10673
        },
        "social_tags": {
            "ogUrl": "https://www.example.com/",
            "title": "币安 Binance 官方下载入口｜安卓App下载与注册开户 · 全球领先数字资产交易平台",
            "author": "Binance 下载中心",
            "ogType": "website",
            "robots": "index,follow,max-image-preview:large,max-snippet:-1,max-video-preview:-1",
            "ogTitle": "币安 Binance 官方下载入口｜安卓App下载与注册开户",
            "keywords": "币安,Binance,币安下载,币安App下载,币安安卓下载,币安注册,币安官网入口,数字资产交易平台,加密货币交易",
            "ogSiteName": "币安 Binance 下载中心",
            "themeColor": "#0B0E11",
            "description": "币安 Binance 下载与注册入口：一键获取安卓 App 安装包，支持 350+ 数字资产行情、机构级撮合引擎与 SAFU 用户保护基金，7×24 小时中文客服，注册即享手续费优惠。",
            "twitterCard": "summary_large_image",
            "ogDescription": "350+ 数字资产、机构级安全防护、7×24 小时行情不间断。立即注册或下载安卓 App，开启数字资产之旅。"
        },
        "trackers": {
            "requests": 1
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1001,
                "tls": 207,
                "wait": 393,
                "connect": 196,
                "download": 10
            },
            "response_ms": 1807
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 33668,
            "co2_grams": 0.0012,
            "cleaner_than": 45
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "118.123.253.132",
                    "host": "ns1.myhostadmin.net"
                },
                {
                    "ip": "211.149.230.100",
                    "host": "ns2.myhostadmin.net"
                }
            ],
            "zone": "binance-cc.com.cn"
        },
        "location": {
            "ip": "168.222.65.180",
            "asn": "153656",
            "org": "OWGELS INTERNATIONAL CO., LIMITED",
            "city": "Tsuen Wan",
            "country": "HK"
        },
        "ssl": {
            "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
            "subject": "binance-cc.com.cn"
        },
        "dns": {
            "A": [
                "168.222.65.180"
            ],
            "NS": [
                "ns2.myhostadmin.net",
                "ns1.myhostadmin.net"
            ],
            "SOA": "{\"nsname\": \"ns1.myhostadmin.net\", \"hostmaster\": \"dnsconct.myhostadmin.net\", \"serial\": 2026101404, \"refresh\": 43200, \"retry\": 300, \"expire\": 1209600, \"minttl\": 3600}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "168.222.65.180",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://binance-cc.com.cn"
            ]
        },
        "social_presence": {
            "profiles": [
                "https://x.com/binance"
            ]
        },
        "linked_pages": {
            "external": [
                "https://accounts.binance.com/zh-CN/register"
            ],
            "external_count": 1,
            "internal_count": 7
        },
        "whois": {
            "registrar": "成都西维数码科技有限公司",
            "created": "2026-10-13T10:05:57Z",
            "expires": "2027-10-13T10:05:57Z",
            "status": [
                "ok"
            ],
            "nameservers": [
                "ns5.west.cn",
                "ns6.west.cn"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000"
            }
        }
    }
}
```