admin[.]amazontw[.]shop

This domain, admin.amazontw.shop, was registered on October 16, 2025, through GoDaddy.com, LLC, and was taken offline by the report date of July 23, 2026. It impersonates the Binance brand, as confirmed by the threat intelligence data, and was classified as an E-Commerce Scam. The page title observed was 'TikTok-Wholesale', which does not match the impersonated brand, indicating a possible redirect or multi-purpose scam setup. Infrastructure analysis shows the domain resolved to IP address 103.120.82.147, hosted in Hong Kong under AS139021 (West263 International Limited). The nameservers were ns53.domaincontrol.com and ns54.domaincontrol.com.

No SSL certificate was present. Security vendor detection was significant: 16 out of 95 vendors on VirusTotal flagged the domain as malicious. Google Safe Browsing flagged it for social engineering. Scamadviser assigned a trust score of 1/100, and Gridinsoft gave a score of 0/100, both reflecting high risk. It appeared on one security blocklist and was blocked by the PhishDestroy service.

Defenders should consider this domain a confirmed impersonation threat targeting Binance users, likely used for credential harvesting or fraudulent e-commerce transactions. Even though the domain is now offline, any records of user interaction, such as submitted credentials or financial data, should be investigated. Monitoring for similar domains registered through GoDaddy with Hong Kong hosting and no SSL is advisable. The discrepancy between the Binance impersonation and the TikTok-Wholesale page title suggests the domain may have been reused for different campaigns, so historical DNS and WHOIS records should be reviewed for additional context.