binance-compass[.]com

This domain, binance-compass.com, represents a high-risk brand impersonation threat specifically targeting Binance, the global cryptocurrency exchange. The site was designed to deceive users into believing they were accessing Binance's official platform, as evidenced by its Chinese-language page title mimicking the exchange's branding. The domain was flagged for phishing by Google Safe Browsing and has been taken offline, but the underlying infrastructure remains a concern.

Security analysis reveals multiple red flags: VirusTotal flagged the domain by 14 out of 95 security vendors, indicating broad consensus on its malicious nature. The domain was registered on April 21, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar sometimes associated with suspicious domains. It resolved to IP address 172.67.186.193, which is linked to Cloudflare, a common hosting provider for phishing sites. The domain appears on one security blocklist and uses a Let's Encrypt SSL certificate (E7), which provides encryption but does not validate legitimacy. PhishDestroy's risk assessment classifies this as high due to the combination of brand impersonation, recent creation, and widespread vendor detection.

To protect against such threats, users should always verify URLs carefully before entering credentials or sensitive information. For Binance specifically, ensure the domain is exactly binance.com and check for security indicators like extended validation certificates. Enable two-factor authentication and use a password manager to avoid reusing passwords. If you suspect you've interacted with this phishing site, change your Binance password immediately and contact their support team. Report the domain to Google Safe Browsing and other security platforms to help protect others.