binance-rapid[.]com

Binance-rapid.com impersonates the well-known cryptocurrency exchange Binance, aiming to deceive users into providing sensitive information. The domain is flagged by 2 out of 94 vendors on VirusTotal, indicating a moderate level of threat detection. Despite its current offline status, it previously posed a risk to unsuspecting users seeking to engage with Binance.

The domain was registered through Fewmoretaps OU d/b/a Trustname.com and hosted on an IP address in Moldova, managed by Alexhost SRL. The SSL certificate was issued by Let's Encrypt, a common choice for securing phishing sites due to its ease of access and free issuance. The site’s page title, written in Chinese, suggests a targeted attempt to lure Chinese-speaking users.

PhishDestroy added binance-rapid.com to its blocklist on the same day it was created, demonstrating the effectiveness of early detection systems. The platform risk score of 56/100 highlights the potential danger it posed during its active phase. As phishing domains often exploit the time gap before antivirus databases update, the quick action by PhishDestroy mitigated potential harm to users.

Although the site is now offline, the incident underscores the persistent threat of phishing domains impersonating major brands like Binance. Users should remain cautious and verify URLs before entering sensitive information, especially when dealing with financial platforms.