Skip to content
Scammers.com
PhishingReviewed

hubfeedback.com fake 'Binance Hub' prize page asks visitors to log in with Binance

Phishing tracker PhishStats posted on X on 10 November 2026 a new phishing page at hubfeedback[.]com, hosted on 153.52.255.25 (Railway, AS400940, United States). The screenshot it shared shows a Ukrainian-language "Bi…

First reported
Reports
1

Source: x.com · published

Illustration: Phishing, texts and email scams

What happened

Phishing tracker PhishStats posted on X on 10 November 2026 a new phishing page at hubfeedback[.]com, hosted on 153.52.255.25 (Railway, AS400940, United States). The screenshot it shared shows a Ukrainian-language "Binance Hub" page offering prizes of 100 USDC and "secret boxes" to anyone who fills in a form, with a button to log in through a Binance account. The domain also appears on the Phishing Army blocklist. Binance is the brand being spoofed and is not involved. Do not sign in to exchange accounts from prize or survey pages; open the official Binance app or site directly.

How the scam works

The screenshot shared by PhishStats shows a Ukrainian-language "Binance Hub" page offering prizes of 100 USDC and "secret boxes" to anyone who fills in a form, with a button to log in through a Binance account. Prize and survey pages like this exist to capture exchange usernames and passwords or to trick people into approving a wallet transaction. Once an exchange account is taken over, funds can be withdrawn quickly.

hubfeedback.com is not a Binance address, and the domain also appears on the Phishing Army blocklist. Binance is the brand being spoofed and is not involved. Do not sign in to an exchange from a prize, survey or feedback page; open the official Binance app or site directly. The report comes from a public tracker post and has not been independently checked by scammers.com.

Source

Public post on X, 10 November 2026: https://x.com/PhishStats/status/2120076398950040023

The indicators come from this source and have not been independently checked by scammers.com.

Red flags

  • A sign-in or account page whose address is not binance.com or the official Binance app.
  • A message, ad or email that urges you to sign in through a link to fix a problem or claim a reward.
  • A request for your password, one-time login code or recovery phrase on a page you reached from a link.
  • A brand name in the address or on the page that does not match the company's real website.
  • A prize, survey or Hub page that asks you to log in with an exchange account.

If you were targeted

  1. 1Do not enter passwords, card numbers or one-time codes on a page reached from a text, email or ad.
  2. 2Open the official app or type binance.com or the official Binance app yourself to check your account.
  3. 3If you entered details, change your password at once and contact the company through its official channels.
  4. 4Report the message and the link to the company and to your national reporting service.
  5. 5Delete the message without replying or tapping any links.
ReportFraud.ftc.gov FBI IC3 More resources

Related reports

All phishing reports
PhishingReviewed

Fake Onet Poczta (Polish webmail) login page at xxvv435.weebly.com

PhishDestroy posted on Mastodon on 12 November 2026 that xxvv435[.]weebly[.]com is a phishing page. Its record describes an Onet Poczta login page with email and password fields, flagged by 19 of 92 VirusTotal engines…

  • xxvv435.weebly.com
  • Weebly subdomain; URLScan brand: onetpl; VirusTotal 19/92
Reported Nov 12, 20261 report
PhishingReviewed

GMX.net email login phishing page at xncok12.weebly.com

PhishDestroy posted on Mastodon on 12 November 2026 that xncok12[.]weebly[.]com is a phishing page. Its record describes a GMX.NET-branded email and password login form, flagged by 17 of 92 VirusTotal engines. GMX is…

  • xncok12.weebly.com
  • Weebly subdomain; VirusTotal 17/92
Reported Nov 12, 20261 report