getxaut[.]today

The domain getxaut.today was identified as a brand impersonation phishing site targeting Binance, the well-known cryptocurrency exchange. This domain is now offline, but during its active period it posed a significant threat to users by attempting to steal sensitive information and cryptocurrency assets. The page title observed was 'Tether Gold - The World’s Leading Gold Token', which is unrelated to Binance but typical of a lure to attract victims.

Technical analysis reveals that the domain was created on February 21, 2026, and resolved to IP address 172.67.193.185. It had an SSL certificate from WE1 and was flagged by 8 out of 95 security vendors on VirusTotal, indicating a high level of malicious consensus. The domain appeared on 2 security blocklists and was found in 1 threat intelligence pulse on AlienVault OTX. These indicators confirm that the domain was actively used for phishing and likely part of a broader campaign.

Given that the domain is now offline, the immediate risk is mitigated, but users should remain vigilant. PhishDestroy recommends that anyone who interacted with getxaut.today should change their Binance passwords and enable two-factor authentication immediately. Always verify URLs before entering credentials and use official channels to access cryptocurrency platforms. For further protection, monitor accounts for unauthorized activity and report any suspicious transactions to relevant authorities.