irejuu[.]digital

Analysis as of July 24, 2026 indicates that the domain irejuu.digital is associated with a high‑risk brand‑impersonation campaign targeting Binance users. The site was registered on January 27, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. No TLS certificate was observed, meaning the site does not provide HTTPS encryption. The page title returned by the server is “TrevaloxanoPro”, a label that does not correspond to the Binance brand and suggests a generic or unrelated landing page. Gridinsoft's trust‑score engine assigns a score of 0 out of 100, reflecting extreme suspicion. VirusTotal has recorded six positive detections out of ninety‑three submitted scanners, confirming that multiple security vendors have identified malicious behavior.

The domain appears on three independent security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL. Google Safe Browsing also flags the domain for social‑engineering content. The nameservers aaden.ns.cloudflare.com and melany.ns.cloudflare.com are standard Cloudflare offerings, offering little insight into the operator beyond the hosting provider. The current operational status is reported as offline, but the historical indicators suggest that the infrastructure was previously active and used to lure Binance users into credential‑stealing or fund‑exfiltration flows. Because the domain is already listed on multiple blocklists and has a zero trust score, defensive teams should continue to enforce DNS‑level denial for irejuu.digital and any sub‑domains, and consider blocking the associated IP 188.114.96.3 at network perimeters.

Monitoring for new domains that resolve to the same IP or share the same registrar may reveal additional campaign artifacts.