deerpool[.]vip

The domain deerpool.vip is currently active and is identified as a high-risk threat due to its brand impersonation of Binance. This malicious domain poses a significant risk to users who may be tricked into providing sensitive information, such as login credentials and financial data, to what they believe is a legitimate Binance service.

Analysis indicates that the domain is flagged by 19 of 95 VirusTotal vendors, which suggests a high level of suspicion and potential harm. The domain is registered through Dominet (HK) Limited and resolves to the IP address 188.114.96.3, which is located in the United States and operated by AS13335 Cloudflare, Inc. The SSL certificate for the domain is issued by Google Trust Services / WE1, potentially lending a false sense of security to unsuspecting users. The domain was created on November 13, 2025, and is currently listed on 1 security blocklist. Google Safe Browsing also flags the domain as a phishing site, further corroborating its malicious nature. The page title found on the domain is 'DeerMining', which is used to deceive users into believing they are interacting with a legitimate mining service associated with Binance.

Given the current status and the high risk level, it is recommended that network administrators and security teams block access to deerpool.vip immediately. Users are advised to avoid clicking on links or providing any personal information to this domain. Additionally, conducting a thorough review of any user accounts that may have accessed this domain is crucial to identify and mitigate potential compromises. Continuous monitoring of the domain and associated IP addresses is recommended to stay informed about any changes in its infrastructure or tactics.