jys[.]binancexx[.]com

This domain, jys.binancexx.com, is a phishing site designed to impersonate Binance, a major cryptocurrency exchange. The site presents a fraudulent login interface to trick users into entering their credentials, which are then captured by threat actors. Stolen credentials are typically used for unauthorized account access, fund theft, or further social engineering attacks targeting the victim’s contacts or associated accounts. Analysis indicates this domain was registered on April 09, 2025, through Global Domain Group LLC. It resolves to the IP address 45.192.107.59 and has been flagged by 3 out of 95 security vendors on VirusTotal. The page title, DDEX, does not match Binance’s legitimate branding, a common red flag in phishing infrastructure. The domain appears on two security blocklists and is actively blocked by multiple threat detection systems. If you visited jys.binancexx.com or entered any credentials, immediately change your Binance password and enable multi-factor authentication. Review your account for unauthorized transactions or suspicious activity. Clear browser cache and cookies to remove any stored session data. Report the incident to Binance’s official support channels and consider monitoring your financial accounts for signs of compromise. Do not interact with any communications claiming to be from Binance that reference this domain.