digibytetrade[.]net

Analysis of digibytetrade.net shows it was registered on 21 February 2026 through Gname.com Pte. Ltd. The domain resolves to a Cloudflare‑provided IPv6 address 2606:4700:3031::6815:d1f located in the United States under ASN 13335. Cloudflare nameservers javon.ns.cloudflare.com and nora.ns.cloudflare.com are authoritative. The site presented a TLS certificate issued by Google Trust Services under the WE1 root, indicating that HTTPS was available at some point. An HTTP request returned a 403 status, and the page title returned by the server was “DIGIBYTE”. Google Safe Browsing classifies the URL as a social engineering threat, and PhishDestroy has listed it as blocked.

The domain appears on one additional security blocklist and received a Gridinsoft trust score of 0 out of 100, reflecting extremely low confidence in legitimacy. VirusTotal analysis shows 13 of 93 scanning engines flagged the domain, consistent with its classification as a brand impersonation scam targeting Binance. The evidence aligns with the declared scam type of brand impersonation and the explicit indication that the site impersonates Binance. The site is currently taken offline, which limits immediate victim exposure, but the infrastructure—particularly the use of Cloudflare and a legitimate‑looking Google certificate—demonstrates an attempt to gain user trust.

Defenders should update URL filtering rules to block digibytetrade.net and any subdomains, ensure that Safe Browsing and PhishDestroy feeds are ingested, and monitor for any re‑registration or similar domains using the same registrar or Cloudflare configuration. Because the domain was active for a short period, threat hunters should search for recent email or credential‑theft campaigns that reference “DIGIBYTE” or Binance branding and correlate them with the 21‑February‑2026 creation date.