# binance-fanclub.com — SUSPICIOUS

> binance-fanclub.com impersonates Binance to deploy a crypto drainer—verify with PhishDestroy before interacting.

## Summary
PhishDestroy identifies binance-fanclub.com as an active brand impersonation campaign targeting Binance users. The domain employs a crypto drainer kit designed to siphon cryptocurrency assets from victims who enter wallet credentials or connect malicious smart contracts. The infrastructure mimics Binance’s branding to deceive users into authorizing unauthorized transactions, with no legitimate connection to the exchange.  

This domain resolves to IP 176.123.1.175 and holds an SSL certificate issued by Let’s Encrypt. Registered through Fewmoretaps OU d/b/a Trustname.com on April 11, 2026, it remains undetected by 95 VirusTotal scanners (0/95 detections), indicating low signature-based detection at this time. The domain has not been blocked in Google Safe Browsing (GSB) and has no presence on major threat blocklists, suggesting recent deployment and limited exposure in security vendor feeds.  

Current status is active, with risk classified as under investigation. PhishDestroy continues monitoring for infrastructure expansion or payload delivery changes. Users should avoid interacting with binance-fanclub.com and verify URLs via PhishDestroy’s real-time scanner. Remaining risk is elevated due to low detection coverage and active impersonation tactics. Immediate mitigation includes domain blocking and updating endpoint protections to flag the IP and domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Binance

## Domain Intelligence
- Registered: 2026-04-11 09:31:29
- Registrar: Fewmoretaps OU d/b/a Trustname.com
- IP: 176.123.1.175

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a2bd5caf-0731-499a-8d6c-454f14d974ff
- PhishDestroy: https://phishdestroy.io/domain/binance-fanclub.com/
- LLM endpoint: https://phishdestroy.io/domain/binance-fanclub.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/binance-fanclub.com/
Last updated: 2026-04-11