binance-partner[.]net

The domain binance-partner.net is a brand impersonation phishing site that specifically targets users of the cryptocurrency exchange Binance. This domain was designed to deceive visitors into believing it is affiliated with Binance, posing a risk of credential theft or financial fraud. The site is currently taken offline, and no drainer kit was detected. Its risk level remains under investigation, but the domain has already been flagged on one security blocklist.

Technical analysis reveals that binance-partner.net has 0 of 95 VirusTotal vendors detecting it as malicious, and it is not flagged by Google Safe Browsing. The domain was registered through Squarespace Domains LLC on 2025-11-08 10:09:06 and resolves to IP address 104.21.44.70, located in the US and hosted by Cloudflare (AS13335). It appears on 1 security blocklist (PhishDestroy) and uses an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'SoftRadar | Home', and the domain employs Cloudflare and HTTP/3 technologies, with nameservers irena.ns.cloudflare.com and nero.ns.cloudflare.com.

Users who interacted with binance-partner.net should take immediate safety steps. Because this is a brand impersonation targeting cryptocurrency, if any credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Monitor financial accounts for unauthorized activity and report the domain to Binance's security team and relevant authorities such as the FBI's IC3 or local cybercrime units. Since no drainer kit was found, token approval revocation is not necessary, but vigilance is advised.