# PhishDestroy domain threat record: kim-binance.com.cn

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/kim-binance.com.cn/
Machine-readable companion: https://phishdestroy.io/domain/kim-binance.com.cn/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 12:42:30 UTC
- Last availability or vendor check: 2026-10-23 12:56:03 UTC
- Stored record updated: 2026-10-23 18:21:45 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Binance

## Stored infrastructure

- Observed IP address: 168.222.65.180
- Registrar in stored WHOIS data: 北京新网数码信息技术有限公司
- Last stored HTTP status: 200

## Evidence links

- URLScan report: https://urlscan.io/result/01a168d3-a5cb-7379-9b60-933feda17a2c/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/kim-binance.com.cn
- Certificate Transparency search: https://crt.sh/?q=%25.kim-binance.com.cn
- Web Archive lookup: https://web.archive.org/web/*/https://kim-binance.com.cn/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake system marked the site on 2026-10-23 after a fresh URLScan scan returned a malicious verdict and an AI model identified a high‑confidence phishing pattern. The recorded page title and meta description repeatedly claim to be the official Binance download and registration portal, yet the domain kim-binance.com.cn is not a Binance‑owned domain. A page fetch on the same day returned HTTP 200 from the recorded server.

How the scam works
Attackers register look‑alike domains, copy the visual branding of a legitimate exchange, and host a page that pretends to offer an official app download or login portal. Victims who enter credentials or install the offered file may have their accounts compromised or their devices infected.

Evidence
URLScan captured the site on 2026-10-23 and classified it as malicious phishing with a score of 100, tagging the Binance brand. VirusTotal scanned the domain on 2026-10-23 with 92 engines and reported zero detections. Google Safe Browsing checked the URL on 2026-10-23 and did not flag it, while OTX showed no pulses and external blocklists returned no hits; PhishDestroy’s internal blocklist contains the domain.

Infrastructure
The recorded IP was 168.222.65.180, listed as belonging to OWGELS INTERNATIONAL CO., LIMITED in Hong Kong (ASN 153656). The domain used the nameservers ns1.myhostadmin.net and ns2.myhostadmin.net, and the TLS certificate was issued on 2026-10-23 by LiteSSL RSA CA 2025, giving it a TLS age of 0 days.

What to do
Anyone who entered Binance credentials on this site should change their Binance password immediately and enable two‑factor authentication. Any downloaded files should be deleted and the device scanned for malware. Defenders should block the domain, monitor for related traffic, and add the address to internal blocklists.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16668-da28-77c2-a912-2e8fda76d141/
Cloudflare Radar report: https://radar.cloudflare.com/scan/3adc2c4a-942b-4df1-a826-6f7eed045124
Stored capture screenshot: https://urlscan.io/screenshots/01a16668-da28-77c2-a912-2e8fda76d141.png
Cloudflare Radar screenshot (2026-10-23T12:45:08Z): https://screenshots.phishdestroy.io/cf/3adc2c4a-942b-4df1-a826-6f7eed045124.png
VirusTotal report: https://www.virustotal.com/gui/domain/kim-binance.com.cn
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=kim-binance.com.cn
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 12:46:14 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/Hpn1wd4D/869a4eb0771c.png
  Captured: 2026-10-23 12:56:03 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a168d3-a5cb-7379-9b60-933feda17a2c.png
  Captured: 2026-10-23 12:56:03 UTC
  Source report: https://urlscan.io/result/01a168d3-a5cb-7379-9b60-933feda17a2c/
- URLScan capture 2: https://screenshots.phishdestroy.io/01a16668-da28-77c2-a912-2e8fda76d141.png
  Captured: 2026-10-23 12:42:30 UTC
  Source report: https://urlscan.io/result/01a168d3-a5cb-7379-9b60-933feda17a2c/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/3adc2c4a-942b-4df1-a826-6f7eed045124.png
  Captured: 2026-10-23 12:45:08 UTC
  Source report: https://radar.cloudflare.com/scan/3adc2c4a-942b-4df1-a826-6f7eed045124
  SHA-256: a576397267fd34df9ff85ab804d6d3210cb696ca23bf9d355cecee253c174892
- URLQuery: https://screenshots.phishdestroy.io/uq/38b136a5-b23f-435d-9ebe-6d98347638e6.png
  Source report: https://urlquery.net/report/38b136a5-b23f-435d-9ebe-6d98347638e6
  SHA-256: 578906b81db44d81f82b8c0dd11ea253a9d9e8f64c49754a699f5fde6ab2e594
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16668-da28-77c2-a912-2e8fda76d141.png
  Captured: 2026-10-23 01:38:40 UTC
  Source report: https://urlscan.io/result/01a16668-da28-77c2-a912-2e8fda76d141/
  SHA-256: 4d645a301c217d59becf079c73836d9611d2181ec6eb90f70e4e9a6732348f3a

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T12:56:13Z",
        "uuid": "01a168d3-a5cb-7379-9b60-933feda17a2c",
        "scanned_at": "2026-10-23T12:54:30Z",
        "final_url": "https://kim-binance.com.cn/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://kim-binance.com.cn/",
                "from": "http://kim-binance.com.cn/",
                "status": 307
            }
        ],
        "ip": "168.222.65.180",
        "domains": [
            "bin.bnbstatic.com"
        ],
        "ips": [
            "18.245.46.20",
            "168.222.65.180"
        ],
        "asns": [
            "16509",
            "153656"
        ],
        "countries": [
            "US",
            "HK"
        ],
        "link_domains": [
            "www.bsmkweb.cc",
            "download.bsmkweb.cc"
        ],
        "doc_hash": "9264eae0969a5c91c2b5c9d05fcc9356af26d72348200e0733dff99b5dafbda5",
        "tls": {
            "san": [
                "kim-binance.com.cn"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "LiteSSL RSA CA 2025",
            "subject": "kim-binance.com.cn",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-20T23:59:59Z",
            "valid_from": "2026-10-23T00:00:00Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 2,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "binance"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Binance"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T12:45:28Z",
        "uuid": "3adc2c4a-942b-4df1-a826-6f7eed045124",
        "scanned_at": "2026-10-23T12:45:08Z",
        "final_url": "https://kim-binance.com.cn/",
        "status": 200,
        "history": [
            {
                "url": "https://kim-binance.com.cn/",
                "status": 200
            }
        ],
        "dom_hash": "f982b01958c125bae725d9a62b6d065670f0c4581d06fb19a3ab5dda49055257",
        "doc_hash": "9264eae0969a5c91c2b5c9d05fcc9356af26d72348200e0733dff99b5dafbda5",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "kim-binance.com.cn",
                "type": "A",
                "value": "168.222.65.180"
            }
        ],
        "dnssec_valid": false,
        "ip": "168.222.65.180",
        "whois": {
            "registrar": "北京新网数码信息技术有限公司",
            "created": "2026-10-23T09:21:02Z",
            "expires": "2027-10-23T09:21:02Z",
            "nameservers": [
                "ns5.west.cn",
                "ns6.west.cn"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T12:44:39Z",
        "analysis_at": "2026-10-23T11:38:23Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "first_seen": "2026-10-23T01:56:27Z",
        "dns": [
            {
                "ttl": 600,
                "type": "A",
                "value": "168.222.65.180"
            },
            {
                "ttl": 500,
                "type": "SOA",
                "rname": "dnsconct.myhostadmin.net",
                "value": "ns1.myhostadmin.net"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns2.myhostadmin.net"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns1.myhostadmin.net"
            }
        ],
        "dns_at": "2026-10-23T11:41:12Z",
        "jarm": "3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763",
        "cert": {
            "san": [
                "kim-binance.com.cn"
            ],
            "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
            "serial": "4b1eb81f6167cdeccda29007ea0d0984ecdaef2c",
            "sha256": "2910cf6a64dc46383c11517bb495ed18c00cc232da5f540c805d46a97a19df4f",
            "subject": "kim-binance.com.cn",
            "valid_to": "2027-01-20T23:59:59Z",
            "valid_from": "2026-10-23T00:00:00Z"
        },
        "whois": {
            "status": [
                "ok"
            ],
            "nameservers": [
                "ns5.west.cn",
                "ns6.west.cn"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T12:45:44Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "kim-binance.com.cn"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-23T12:44:49Z",
            "first": "2026-10-23T12:44:49Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 16230
        },
        "social_tags": {
            "ogUrl": "https://www.binance-download.example/",
            "title": "币安 Binance 币安下载 币安官网｜币安注册 币安交易所 · 加密资产交易平台",
            "author": "Binance 下载中心",
            "ogType": "website",
            "robots": "index,follow,max-snippet:-1,max-image-preview:large,max-video-preview:-1",
            "ogTitle": "币安 Binance 下载与注册入口｜安卓App下载 · 加密资产交易平台",
            "keywords": "币安,币安下载,币安App下载,币安安卓版,币安注册,币安官网,Binance,加密资产交易平台,币币交易,合约交易,Web3钱包",
            "ogSiteName": "币安 Binance 下载中心",
            "themeColor": "#F0B90B",
            "description": "币安 Binance 全球领先的加密资产交易平台。本页提供币安安卓 App 下载入口与注册开户指引，支持币币交易、合约、理财与 Web3 钱包，安全合规、低手续费、7×24 小时中文客服。",
            "twitterCard": "summary_large_image",
            "ogDescription": "一键获取币安安卓 App 下载入口，注册即享低手续费与 7×24 小时中文客服支持。"
        },
        "trackers": {
            "requests": 1
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 16,
                "tls": 202,
                "wait": 399,
                "connect": 197,
                "download": 196
            },
            "response_ms": 1010
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 54084,
            "co2_grams": 0.002,
            "cleaner_than": 35
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "61.172.183.73",
                    "host": "ns2.myhostadmin.net"
                },
                {
                    "ip": "60.247.150.254",
                    "host": "ns1.myhostadmin.net"
                }
            ],
            "zone": "kim-binance.com.cn"
        },
        "location": {
            "ip": "168.222.65.180",
            "asn": "153656",
            "org": "OWGELS INTERNATIONAL CO., LIMITED",
            "city": "Tsuen Wan",
            "country": "HK"
        },
        "ssl": {
            "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
            "subject": "kim-binance.com.cn"
        },
        "dns": {
            "A": [
                "168.222.65.180"
            ],
            "NS": [
                "ns2.myhostadmin.net",
                "ns1.myhostadmin.net"
            ],
            "SOA": "{\"nsname\": \"ns1.myhostadmin.net\", \"hostmaster\": \"dnsconct.myhostadmin.net\", \"serial\": 2026102402, \"refresh\": 43200, \"retry\": 300, \"expire\": 1209600, \"minttl\": 3600}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "168.222.65.180",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://kim-binance.com.cn"
            ]
        },
        "social_presence": {
            "profiles": [
                "https://x.com/binance"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.bsmkweb.cc/zh-CN/join",
                "https://download.bsmkweb.cc/pack/BNApp_F0002073.apk"
            ],
            "external_count": 2,
            "internal_count": 6
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000"
            }
        }
    }
}
```