binostakingbinoforinvest[.]com

The domain binostakingbinoforinvest.com was registered on March 13, 2026 through NameCheap, Inc. and is currently listed as taken offline. Infrastructure analysis shows the domain resolves to the Cloudflare‑owned address 172.67.219.195, located in the United States and associated with ASN 13335 (Cloudflare, Inc.). Both authoritative nameservers are faye.ns.cloudflare.com and roman.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. The site’s page title, "DetectivPro - AML Crypto Risk Checker for BTC, USDT, ETH, TON and other coins," suggests an attempt to pose as a cryptocurrency compliance or risk‑checking service, aligning with the classified scam type of an investment scam.

Detection data reveal the domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis recorded five positive detections out of ninety‑four scanned security vendors, confirming that multiple threat intelligence sources have identified malicious behavior. The technology fingerprint includes Unpkg, Cloudflare Browser Insights, Cloudflare, and HTTP/3, all typical of sites hosted behind Cloudflare’s edge network.

While the exact payload or credential‑harvesting mechanisms have not been publicly disclosed, the combination of a convincing crypto‑focused page title, Cloudflare‑based hosting, and the observed blocklist presence indicates a high likelihood of phishing or fraudulent investment solicitation. Defenders should continue to block the domain at perimeter firewalls and DNS filtering solutions, monitor for any residual activity on the associated IP address, and update internal threat feeds with the observed detection count. Given the elevated risk rating, security teams are advised to educate users about unsolicited crypto risk‑checking services and to enforce multi‑factor authentication for any credential submission processes.