binancet[.]com

This domain, binancet.com, is actively impersonating Binance, a well-known cryptocurrency exchange platform, as confirmed by multiple threat intelligence sources. Registered on November 17, 2024, through Dynadot LLC, the domain currently resolves to the IP address 18.245.46.111. Analysis indicates a high-risk classification due to its presence on two security blocklists and detection by 6 out of 95 security vendors on VirusTotal, which flagged it as malicious. Additionally, the domain appears in 23 threat intelligence pulses on AlienVault OTX, further corroborating its association with fraudulent activity. The page title, 'Create a free account | Binance,' explicitly aligns with the brand impersonation threat type, suggesting an intent to deceive users into believing they are interacting with the legitimate Binance platform. The domain has been blocked by security tools such as PhishDestroy and BLP-Malware, reinforcing its malicious nature. Infrastructure analysis reveals no legitimate affiliation with Binance, and the domain's creation date, less than eight months prior to this report, is consistent with patterns observed in short-lived phishing campaigns targeting financial services. While the exact content and functionality of the site remain unanalyzed, the available evidence strongly indicates a deliberate attempt to exploit Binance's brand reputation. Defenders should prioritize blocking this domain at the network level, particularly in environments where cryptocurrency transactions occur. Monitoring for related domains registered through the same registrar or resolving to the same IP address may help identify additional threats. Given the domain's active status and low trust scores from Gridinsoft and Scamadviser, organizations should treat any interaction with binancet.com as potentially fraudulent and respond accordingly.