nexorim-ai[.]com

This domain, nexorim-ai.com, is identified as a brand impersonation threat specifically targeting Binance, a major cryptocurrency exchange. The site presents itself as an official AI-driven trading platform under the guise of Nexorim Ai, claiming over 10,000 reviews and advanced trading capabilities for 2025. Analysis indicates the domain is currently offline, though it previously posed a significant risk to users seeking legitimate trading services. Infrastructure analysis reveals multiple red flags. The domain is flagged by 5 of 95 security vendors on VirusTotal, indicating malicious activity. It resolves to the IP address 104.21.41.112 and was registered through Gransy, s.r.o. on February 21, 2026, an unusually future-dated registration that may suggest fraudulent intent. Additional indicators include a Gridinsoft trust score of 0 out of 100, presence on one security blocklist, and inclusion in a threat intelligence pulse on AlienVault OTX. The page title explicitly markets itself as an official platform, further corroborating the impersonation scheme. Given the domain's current offline status, immediate threats appear mitigated. However, users should remain vigilant for similar impersonation attempts. It is recommended to verify domain registration dates, cross-reference IP resolutions with known malicious infrastructure, and consult multiple threat intelligence sources before engaging with any cryptocurrency-related platform. Organizations should monitor for re-registration or re-emergence of this domain under altered infrastructure and update blocklists accordingly.