home-binance[.]com

Analysis conducted on July 26, 2026 identifies home-binance.com as an active phishing domain targeting cryptocurrency users. Infrastructure analysis reveals the domain is registered through GoDaddy.com, LLC and currently resolves with an HTTP 200 status, indicating a live server response. Nameservers ns71.domaincontrol.com and ns72.domaincontrol.com are consistent with GoDaddy hosting infrastructure, though this alone does not confirm malicious intent. Detection data shows 18 of 91 security vendors on VirusTotal flag the domain as malicious, while PhishDestroy has explicitly blocked it. The domain also appears on at least one security blocklist, reinforcing its classification as a high-risk threat.

No specific brand target or phishing kit details are provided in available intelligence, though the domain name suggests an attempt to impersonate Binance, a major cryptocurrency exchange. The exact content of the page remains unanalyzed; defenders should not assume the presence of specific login forms, visuals, or functionality without further evidence. The domain's registration and hosting details do not include anomalous dates or unusual patterns, but the combination of detection vendor flags and blocklist inclusion strongly supports its malicious classification. Defenders are advised to treat this domain as an active phishing threat.

Network-level blocking is recommended, particularly for organizations handling cryptocurrency transactions or user credentials. Security teams should monitor for connections to home-binance.com in logs and investigate any associated IP addresses or SSL certificates. If user reports or additional analysis confirm the presence of a fake Binance login page, incident response procedures should be initiated to mitigate credential theft risks. Further analysis of the domain's content and traffic patterns is necessary to determine the full scope of the campaign.