binance-ido[.]com

The domain binance-ido.com has been identified as a brand impersonation threat specifically targeting the Binance cryptocurrency exchange. This domain was registered on February 21, 2026, through Gname.com Pte. Ltd. and is designed to deceive users by mimicking Binance's official appearance, likely to steal login credentials or prompt unauthorized transactions. No specific drainer kit has been associated with this domain, but the risk of credential theft and financial loss remains high.

Technical indicators reveal that the domain resolves to IP address 172.245.147.205 and carries an SSL certificate issued by Let's Encrypt (R10). VirusTotal analysis shows that 4 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. Google Safe Browsing status is not provided, but given the offline status, it is likely also flagged. The page title is simply "Home," which lacks any specific branding, a common tactic to avoid early detection.

Currently, binance-ido.com has been taken offline, mitigating immediate risk. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends blocking the domain, IP address, and any associated subdomains across all network perimeters. Users who may have interacted with the site should change their Binance passwords immediately and enable two-factor authentication. Continuous monitoring for related domains is advised to prevent future attacks.