bintocaz[.]com

This domain, bintocaz.com, is identified as a generic phishing resource targeting users through deceptive financial service impersonation. Analysis indicates the absence of direct brand association or specialized drainer kit signatures, suggesting a broader credential harvesting or fraudulent transaction scheme. The infrastructure leverages Cloudflare for hosting and performance optimization, as evidenced by detected technologies including Cloudflare Browser Insights, which may complicate attribution and mitigation efforts due to proxy obfuscation. Technical indicators reveal a VirusTotal detection score of 15 out of 95 security vendors, indicating moderate consensus on malicious classification. The domain was registered through Hello Internet Corp on February 23, 2026, with resolution to IP address 188.114.97.3, a Cloudflare-operated endpoint. At the time of assessment, the domain appeared on a single security blocklist and was not listed in Google Safe Browsing databases. Creation metadata and registrar selection align with patterns observed in short-lived phishing campaigns designed for rapid deployment and evasion. Current status confirms the domain has been taken offline, likely in response to detection and reporting mechanisms. Despite its inactive state, residual risk persists due to potential reuse of the underlying infrastructure or registration of successor domains through the same registrar. Organizations are advised to monitor for related domains registered via Hello Internet Corp, particularly those resolving to Cloudflare IP ranges or exhibiting similar creation timestamps. Network-level blocking of 188.114.97.3 and implementation of sinkholing for confirmed phishing domains are recommended as proactive defense measures.