cewsmmbinance[.]pages[.]dev

This domain, cewsmmbinance.pages.dev, is flagged as an active phishing site specializing in brand impersonation targeting Binance, a major cryptocurrency exchange. The page title, 'CEW SMM - Binance Pay,' suggests an attempt to deceive users into believing they are interacting with a legitimate Binance payment service. Analysis indicates the site is designed to harvest login credentials, likely funneling stolen data to threat actors for financial exploitation or further compromise of digital assets. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on March 12, 2026, and currently resolves to the IP address 188.114.97.3, hosted under AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is identified as E8, a detail that may assist in tracking related infrastructure. Detection metrics show the domain is flagged by 10 out of 95 security vendors on VirusTotal, while appearing on one security blocklist. Despite these indicators, the site remains operational, underscoring its persistence. As of the latest assessment, cewsmmbinance.pages.dev remains active, posing a continued risk to users. The domain has been blocked by at least one security entity, but the low blocklist count suggests limited visibility or delayed response. Users are advised to avoid interaction with the domain and report it to relevant security platforms. Organizations should update detection rules to include this domain and its associated IP address to mitigate further exposure.