ny-esspresso[.]xyz

This domain, ny-esspresso.xyz, is a confirmed phishing site impersonating Binance under the guise of an "Espresso Claim Portal." The site is designed to deceive users into entering sensitive account credentials, wallet recovery phrases, or other personal information by mimicking legitimate Binance reward or airdrop pages. Such schemes often lead to unauthorized access to cryptocurrency wallets, financial theft, or identity fraud. Users who interact with this site risk losing control of their Binance accounts or linked digital assets. Analysis indicates this domain was registered on December 29, 2025, through NameSilo, LLC, a registrar frequently associated with malicious infrastructure. The site resolves to IP address 172.67.157.15, hosted on Cloudflare’s network (AS13335), which is commonly used to obscure the true origin of phishing operations. At the time of assessment, 11 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on three independent security blocklists. The absence of an SSL certificate further signals its illegitimate nature, as legitimate financial platforms universally enforce HTTPS encryption. If you visited ny-esspresso.xyz or entered any information on the site, immediate action is required. First, revoke access to any connected wallets or third-party applications linked to your Binance account. Reset your Binance password using a secure device and enable multi-factor authentication if not already active. Monitor your account for unauthorized transactions and report suspicious activity directly to Binance’s official support channels. Avoid clicking on any links received via email or social media claiming to be from Binance, and verify all communications through the company’s official website or verified social media profiles.