[WARNING] Binance phishing site

[acroman08]

A fair warning to everyone who doesn't have an ad blocker to be careful when clicking after searching "binance". there is a Phishing site called "binanance.page" currently at the top of the search result when searching "binance" due to google ad.

photos for reference.
 

Code:

https://binananec.page/

[sujonali1819]

Nice finding. This add is also showing on me here. That's weird that why google does not verify the adds before showing. And this is not such shit job by google, Previously there are many such scams adds were coming top on google front page.

Nothing we can do except reporting the add or should avoid search sensitive case where money is involved in google search.

[$crypto$]

Good catch ...

When I wanted to try to do a Binance search on google search I was very surprised because what I found a different domain binanee.app I thought this is the same as the OP found and I saw in whois their domains are registered the same so it is possible that the scamers have spread a lot of phishing in the ad google with the main search.

Screenshot and domain info.

9 days old
Created on 2021-04-27
Expires on 2022-04-27
Updated on 2021-05-02

https://whois.domaintools.com/binanee.app

So it is true we have to type the URL directly instead of doing a search on google.

Archived: https://archive.is/i0aK4

[Charles-Tim]

One of the worst search engines is Google search engine and so also are the other search engines belonging to those big companies like Microsoft and Apple, there are better search engines to use which are called privacy search engines.

The recommended search engines:

• Duckduckgo
• Qwant

Making use of ad blocker will also help, it is also good to make use of anti-malware, but stop using Google search engine will really help against this scam ad links.

[acroman08]

One of the worst search engines is Google search engine and so also are the other search engines belonging to those big companies like Microsoft and Apple, there are better search engines to use which are called privacy search engines.

The recommended search engines:

• Duckduckgo
• Qwant

Making use of ad blocker will also help, it is also good to make use of anti-malware, but stop using Google search engine will really help against this scam ad links.

yeah, they are the worst. but one of the reasons why I use them is that if I stumbled upon websites like this I could report it in hope of the website being taken down or at least on their ad or warn those who are blindly clicking whichever is on the top search result. thanks for the recommendation btw. I'm sure others can benefit from it.

[Yaunfitda]

Good find mate, although when I try it on my end, I didn't get the same result, maybe it was taken down already or removed by Google from their search algorithm.

Yes, we all know that Google is the worst and there are options, but for sure majority of us crypto users still rely on Google itself. And sometimes we forgot this important things and it's possible that it can still trap some of us here.

[Kittygalore]

One of the worst search engines is Google search engine and so also are the other search engines belonging to those big companies like Microsoft and Apple, there are better search engines to use which are called privacy search engines.

The recommended search engines:

• Duckduckgo
• Qwant

Making use of ad blocker will also help, it is also good to make use of anti-malware, but stop using Google search engine will really help against this scam ad links.

Qwant is not a familiar search engine but I do use a lot of Duckduckgo whenever I do some legitimacy searches. I do also locate the Twitter profile of the website that I am not sure the name is and it will be difficult to fake the verified mark of the website on Twitter so it helps me get to the site without having to land on a phishing website.

[Joel_Jantsen]

A simple 2FA can save you a lot from these scam sites. Imagine, they get the login details, if you have 2fa enabled, you'd be asked to confirm a 2fa code on the official site as your login details are just not enough. Bianance is very secure that way when it comes to authorizing logins with new IP's.

[stompix]

Hihi, has anyone tried to check the page?
I was curious about how they react to a login (obviously with fake credentials and on a VM) but when I clicked on the login I was redirected to this:

https://accounts.binance.com/en/register?ref=11587302

I don't think this qualifies as phishing per Binance's ToS but I guess they won't be that happy someone is using their names like this, even if it is promoting their website. I couldn't find a similar page on Binance but most affiliate programs have something like this in their terms, for example, Amazon

You cannot use or apply to register any trademark that is confusingly similar to any Amazon mark in any jurisdiction. You cannot use or apply to register any trademark, domain name, subdomain, username or app name that is confusingly similar to any Amazon mark in any jurisdiction.

Anyhow, now you can report it directly to Binance.

[Charles-Tim]

I was curious about how they react to a login (obviously with fake credentials and on a VM) but when I clicked on the login I was redirected to this:

https://accounts.binance.com/en/register?ref=11587302

I think it has to be taken down, clicking on 'register' is truly directing people to the legit binance exchange using referrer link, but what about tomorrow if clicking on register will redirect people to fake binance exchange. This can result to many people losing a lot of money. In my opinion, this is just fake binance that should be taken down.

[Johnyz]

One of the worst search engines is Google search engine and so also are the other search engines belonging to those big companies like Microsoft and Apple, there are better search engines to use which are called privacy search engines.

The recommended search engines:

• Duckduckgo
• Qwant

Making use of ad blocker will also help, it is also good to make use of anti-malware, but stop using Google search engine will really help against this scam ad links.

That's true Google didn't do any work to block those phishing site, they are just a pure search engine that didn't care if you click into a fake site or not, that option might be good to those who are dealing with the market, it can prevent you from going into a fake site.

There's a lot of fake site and its our responsibility to triple check the site before entering our details, its easy to spot the fake site so make sure to check it first before anything else. Stay Safe everyone!

[hugeblack]

Hihi, has anyone tried to check the page?
I was curious about how they react to a login (obviously with fake credentials and on a VM) but when I clicked on the login I was redirected to this:

https://accounts.binance.com/en/register?ref=11587302

I don't think this qualifies as phishing per Binance's ToS but I guess they won't be that happy someone is using their names like this, even if it is promoting their website. I couldn't find a similar page on Binance but most affiliate programs have something like this in their terms, for example, Amazon

Your first login must redirected you to the official website so that you do not doubt things. When you click on the letter "B" in the address field, you will find the name of that scam site first.
Next time you will enter your data again and maybe even 2FA authentication.

Generally, the second authentication will make the possibility of scam less but may cause some loss of privacy.

[acroman08]

-snip

you're right, thanks for pointing that out. but the website is still a little concerning and deceiving that should still be avoided by anyone who stumbles upon it. I already reported the website via email using this email address security@binance.com but not for trademark infringement(I think that's the right word to use, maybe not) but for phishing. also, seems like the website $crypto$ shared has the same creator since the website both share the same referral code.

[andrei8787]

Reported to Cryptoscamalert
https://cryptoscamalert.com/crypto_scam_report/1261

[JohnBitCo]

When I wanted to try to do a Binance search on google search I was very surprised because what I found a different domain binanee.app I thought this is the same as the OP found and I saw in whois their domains are registered the same so it is possible that the scamers have spread a lot of phishing in the ad google with the main search.

A piece of advice for everyone, Never search for your frequently used exchange on google. Just bookmark it and use it from there. If you always google it, chances are that one day you may end up logging into the scam site. As more and more money comes in crypto, these phishing site business will also boom. So better be careful.

[aioc]

As the number one exchange in the industry expect scammers to target newbies who do not have adequate knowledge on how to protect themselves, if you do now have an extension that can block phishing sites, then bookmark at least two pages on the legit site, the home page, and the login page and always check every time you visit Binance if you are in a bookmarked page.

[$crypto$]

As the number one exchange in the industry expect scammers to target newbies who do not have adequate knowledge on how to protect themselves, if you do now have an extension that can block phishing sites, then bookmark at least two pages on the legit site, the home page, and the login page and always check every time you visit Binance if you are in a bookmarked page.

The point as a whole must be verified in this detail is that the crypto industry is growing rapidly, so there will be more people who store assets there, therefore I think any security must be applied, including the security recommended by the exchange, and remember Scammers always have loopholes in this but as much as possible we will save our funds from the unwanted.
I think it's not just Binance that almost all crypto exchanges will be phished by irresponsible people, so that's where it all starts with verification.

[Saisher]

I think it's not just Binance that almost all crypto exchanges will be phished by irresponsible people, so that's where it all starts with verification.

That is why we should know how to differentiate and to trace the right site we are visiting, install the right extensions and ad blocker and always check the latest updates about the exchange you are using, it's your responsibility to do that it's part of protecting your investment and mature investor.