benacoin[.]com

The domain benacoin.com has been identified as a phishing site impersonating a cryptocurrency exchange platform. Analysis confirms this domain functions as a fraudulent crypto exchange portal, designed to deceive users into submitting credentials or transferring digital assets. As of the latest verification, benacoin.com has been taken offline, though prior activity remains a documented threat. Infrastructure analysis reveals the domain was registered on March 07, 2026, through Hello Internet Corp and resolved to the IP address 188.114.96.3. Detection metrics indicate 7 of 95 security vendors on VirusTotal flagged this domain as malicious, while it appears on 3 distinct security blocklists. The domain's trust score is rated at 0 out of 100, reflecting high confidence in its malicious classification. Technologies detected include Node.js, Vue.js, Nuxt.js, Nginx, Express, reCAPTCHA, Cloudflare Browser Insights, and Cloudflare, with an SSL certificate issued by Let's Encrypt. Current status confirms benacoin.com is offline, though residual risk persists for users who may have interacted with the domain prior to its takedown. Organizations and individuals are advised to block the domain and associated IP address at the network perimeter. Users who accessed the site should revoke any active sessions, rotate credentials, and monitor accounts for unauthorized transactions. Security teams should review logs for connections to 188.114.96.3 and the domain itself, while updating detection rules to include this indicator of compromise.