binancebnb[.]live

The domain binancebnb.live was identified as a brand impersonation threat specifically targeting Binance, the popular cryptocurrency exchange platform. This domain was designed to deceive users into believing they were interacting with an official Binance service, as evidenced by its page title 'Official USDT Verification - BNB Smart Chain'. The threat type is brand impersonation, leveraging the trusted name of Binance to potentially harvest credentials or trick users into connecting their wallets, though no specific drainer kit was identified in the intelligence.

Technical indicators reveal that binancebnb.live was registered through GoDaddy.com, LLC and created on May 13, 2026. It resolved to IP address 77.245.76.110 and was secured with a Let's Encrypt SSL certificate (R12). VirusTotal analysis showed 0 detections out of 95 scans, indicating that the domain was not flagged by security vendors at the time of analysis. However, it appeared on one security blocklist, suggesting some threat intelligence sources had already identified it as malicious. The domain was not listed on Google Safe Browsing (GSB) at the time of review.

As of the current report, binancebnb.live has been taken offline, which mitigates immediate risk. Response actions have successfully neutralized the threat by removing the domain from active use. However, users should remain vigilant as similar domains may reappear. PhishDestroy recommends that users always verify the authenticity of any site requesting wallet connections or personal information, especially those claiming to be official Binance verification pages. Avoid entering sensitive data on lookalike domains and report suspicious URLs to relevant authorities.