btc2-binance[.]com[.]cn

This domain, btc2-binance.com.cn, poses a significant threat as a brand impersonation scheme targeting users of the Binance cryptocurrency exchange. The site replicates the official Binance interface, including identical page titles in Chinese and English, such as '币安 | Binance - 全球居首的加密货币交易平台 | 买卖比特币、以太坊官方网站.' Its primary objective is to deceive visitors into entering sensitive credentials, including login details, two-factor authentication codes, and private wallet keys, enabling attackers to steal funds or gain unauthorized access to accounts. The site may also distribute malicious software under the guise of wallet updates or trading tools, further compromising user security. Analysis indicates this domain is registered through Web Commerce Communications Limited and currently resolves to the IP address 188.114.97.3. It remains actively operational and has been flagged by multiple security sources, including three distinct blocklists: PhishDestroy, MetaMask, and SEAL. VirusTotal reports that 2 out of 95 security vendors have identified this domain as malicious, a low detection rate that underscores the sophistication of the threat. The SSL certificate, issued by Google Trust Services under the identifier WE1, mimics legitimate encryption practices to appear trustworthy, though this does not mitigate the underlying fraudulent intent. Users who have visited btc2-binance.com.cn or entered any information on the site should take immediate action to secure their accounts. First, cease all interaction with the domain and avoid downloading any files or clicking on links from the site. Next, change passwords and enable multi-factor authentication on all cryptocurrency exchange accounts, prioritizing Binance and any other platforms where similar credentials may have been reused. Monitor account activity for unauthorized transactions and report any suspicious behavior to the official support channels of the affected platforms. If private keys or recovery phrases were entered, transfer remaining funds to a new, secure wallet immediately. Finally, scan local devices for malware using updated security tools to detect and remove any potential infections.