yzkmn[.]cn

This domain, yzkmn.cn, is identified as a brand impersonation threat specifically targeting Binance, a major cryptocurrency exchange platform. The site is designed to mimic legitimate Binance services, tricking users into entering sensitive credentials such as login details, two-factor authentication codes, or private wallet keys. Once obtained, these credentials can be used to drain cryptocurrency holdings, execute unauthorized transactions, or gain persistent access to user accounts. The presence of a misleading page title, Mercado Libre, further suggests an attempt to confuse visitors or evade detection by blending in with unrelated but familiar brand names. Such tactics are common in phishing operations aiming to exploit user trust and bypass security awareness. Analysis indicates that yzkmn.cn was registered on December 23, 2025, through Web Commerce Communications Limited, a registrar often associated with high-risk or newly created domains. The domain resolves to the IP address 137.220.157.113, located in Hong Kong under AS4907 (BGPNET PTE. LTD.), an autonomous system frequently observed in hosting malicious infrastructure. Notably, the site lacks an SSL certificate, a critical security feature that encrypts data in transit, further signaling its illegitimate nature. Security vendors have flagged this domain in 17 out of 95 scans on VirusTotal, with detections including phishing, brand impersonation, and fraudulent activity. Additionally, the domain appears on at least one security blocklist and is currently offline, likely due to takedown efforts or evasion tactics by the operators. If you visited yzkmn.cn or interacted with any content from this domain, immediate action is required to mitigate potential risks. First, cease all interaction with the site and do not enter any credentials or personal information. If you provided login details, immediately change your Binance password and enable two-factor authentication if not already active. Monitor your account for unauthorized transactions and report any suspicious activity to Binance support. Additionally, consider revoking access to any third-party applications linked to your account. Users should also scan their devices for malware, as phishing sites may distribute malicious payloads. Finally, report the domain to relevant authorities or security organizations to aid in broader takedown efforts and prevent further victimization.