binanceweb3-ru[.]cfd

This domain is flagged for elevated risk due to brand impersonation targeting Binance, a major cryptocurrency exchange. Analysis indicates the site is designed to deceive users into believing it is an official Binance web3 platform, likely for fraudulent purposes such as credential theft or unauthorized transactions. The domain exhibits characteristics consistent with crypto-related scams, including the use of Binance branding and web3 terminology to exploit user trust in decentralized finance services.

Infrastructure analysis reveals the following technical indicators: the domain binanceweb3-ru.cfd is registered through Web Commerce Communications Ltd and was created on March 20, 2026. It resolves to the IP address 94.154.35.90 and is currently offline. Security vendors on VirusTotal flagged this domain at a rate of 17/95, while it appears on one security blocklist. The Gridinsoft trust score for this domain is 0/100, further confirming its malicious nature. The registration date suggests the domain may have been preemptively created for future malicious campaigns, a common tactic in brand impersonation schemes.

To mitigate risks associated with this brand impersonation threat, affected organizations and users should take the following steps: Immediately block the domain binanceweb3-ru.cfd and its associated IP address 94.154.35.90 across all security controls, including firewalls, email gateways, and endpoint protection systems. Conduct a retrospective analysis of network logs to identify any prior connections to this domain or IP, particularly from endpoints associated with cryptocurrency transactions. Educate users on recognizing brand impersonation tactics, such as verifying domain names for subtle misspellings or unusual TLDs, and emphasize the importance of accessing official platforms only through verified URLs. Additionally, monitor for similar domains registered through the same registrar or resolving to the same IP range, as these may indicate a broader campaign.