binancenet[.]info

The domain binancenet.info is a confirmed phishing site engaged in brand impersonation targeting Binance, a major cryptocurrency exchange. It was designed to deceive users into believing they were interacting with the legitimate Binance platform, posing an elevated risk of credential theft or fraudulent transactions. No cryptocurrency drainer kit was identified in this campaign. The site is currently taken offline, but users who may have interacted with binancenet.info should remain cautious.

Technical analysis reveals that binancenet.info was flagged by 2 of 95 security vendors on VirusTotal, including Chong Lua Dao and Fortinet. The domain was registered through NameSilo, LLC on February 21, 2026, and resolved to the IP address 156.245.234.124, hosted on AS54801 Zillion Network Inc. in Hong Kong. It appeared on one security blocklist, PhishDestroy, and used an SSL certificate issued by Let's Encrypt (R12). The observed page title was 'MySites', and MX records pointed to mail.eye-mail.net, with nameservers ns1.dnsowl.com, ns2.dnsowl.com, and ns3.dnsowl.com.

Users who visited binancenet.info should immediately change their Binance account passwords and enable two-factor authentication (2FA) if they entered credentials. Monitor accounts for unauthorized transactions or suspicious activity. If cryptocurrency was involved, check for unauthorized token approvals and consider moving funds to a new wallet. Report the phishing domain to Binance's official abuse channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.