# bintocaz.com — SUSPICIOUS

> PhishDestroy analysis flags bintocaz.com as Crypto-Giveaway phishing since Feb 2026. VT score 2/95, IP 188.114.97.3. Check the full report.

## Summary
PhishDestroy identifies bintocaz.com as an active fake-crypto-giveaway phishing domain operated since February 23, 2026. The site masquerades as a Binance-themed airdrop lure and hosts a drainer kit that requests wallet connections and private-key input to steal deposited funds. The kit is generic but styled with Binance branding to increase credibility among cryptocurrency users. No advanced obfuscation is observed, suggesting opportunistic rather than highly targeted operations.  

This domain was flagged by PhishDestroy with a VirusTotal detection score of 2 out of 95 security vendors, indicating limited but real threat intelligence coverage. It resolves to IP address 188.114.97.3, is registered through Hello Internet Corp, and holds a valid Let’s Encrypt SSL certificate. The domain was created on February 23, 2026, placing it less than 48 hours old at time of analysis. It has not yet appeared on Google Safe Browsing lists and remains absent from the majority of public blocklists, totaling zero blocklist matches.  

As of this report bintocaz.com is active and the phishing campaign continues to propagate via social media and messaging channels targeting crypto holders. Google Safe Browsing has not yet blacklisted the domain, and takedown requests are pending with the registrar and hosting provider. Remaining risk is elevated given the domain age, Binance branding exploitation, and active wallet drainer operation. Users should immediately block the domain and IP, avoid wallet connections, and report sightings to PhishDestroy and relevant CERT teams to accelerate takedown.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-23 09:24:28
- Registrar: Hello Internet Corp
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c763af0e-c3d0-4a51-90f8-6a3351d93c71
- PhishDestroy: https://phishdestroy.io/domain/bintocaz.com/
- LLM endpoint: https://phishdestroy.io/domain/bintocaz.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bintocaz.com/
Last updated: 2026-03-21