cryptotradesignals[.]live

cryptotradesignals.live is currently active and hosts a page titled “AI Crypto Trade Signals – Binance Futures & 1% Profit Strategy”. The page explicitly references Binance, indicating a brand impersonation campaign aimed at cryptocurrency users. The domain was reported on July 12, 2026 and is classified under the threat type brand_impersonation with a risk level of under_investigation. Technical analysis shows the domain resolves to the IPv4 address 135.181.150.27, which belongs to the Hetzner Online GmbH network (ASN 24940) located in Finland. Registration was performed through the CLOUD-HEL1 registrar, and the authoritative nameservers are listed as ns1.domain.tld and ns2.domain.tld. The site presents a GoDaddy‑issued TLS certificate signed by the GoDaddy TLS Intermediate CA DV – R1v1, and HTTP requests receive a 301 redirect response. The infrastructure has received a Gridinsoft trust score of 0 out of 100, reflecting a low reputation. It is presently blocked by PhishDestroy and appears on a single security blocklist. VirusTotal scans have returned 0 detections out of 95 engines, which does not constitute a safety indication. No additional malware detections or payload analysis have been published, leaving the exact malicious behavior beyond the page title unverified. Defenders should treat cryptotradesignals.live as a high‑confidence indicator of a Binance impersonation attempt. Recommended actions include adding the domain and its resolving IP to outbound filtering lists, monitoring DNS queries for the associated nameservers, and deploying URL‑based detection rules that match the observed page title. Continuous re‑evaluation is advised, as future changes to the site could introduce additional threat vectors.