j-binance[.]com

Analysis indicates that the domain j-binance.com is currently operating as a phishing site. The domain was registered through the registrar Spaceship, Inc., and resolves to the authoritative nameservers launch1.spaceship.net and launch2.spaceship.net. An HTTP request to the root URL returns a 200 OK status, confirming that the web service is live. The site is listed on a security blocklist and has been actively blocked by the PhishDestroy mitigation service, reinforcing the assessment of malicious intent.

VirusTotal scans have recorded 14 detections out of 91 antivirus engines, showing that a significant minority of security products identify the host as suspicious. The domain appears on one additional public blocklist, further evidencing its inclusion in threat intelligence feeds. No additional contextual data such as page title, brand targeting, or SSL certificate details are available in the current intelligence set, leaving the exact content and credential‑harvesting mechanisms unverified.

However, the combination of active hosting, blocklist presence, and multiple vendor detections satisfies the criteria for a high‑risk phishing classification. Defenders should add j-binance.com to corporate URL filtering and DNS sinkhole lists, ensure that endpoint protection solutions receive the latest indicator updates, and monitor for any outbound connections from internal hosts to the domain’s IP addresses. Continuous re‑evaluation is advised, as further analysis of page content or observed traffic patterns could reveal additional attack vectors.