digital-surge-prototype[.]netlify[.]app

The domain digital-surge-prototype.netlify.app has been identified as a high-risk brand impersonation threat targeting Binance. The domain is actively used to deceive users by mimicking legitimate services associated with Binance, specifically focusing on withdrawing Ethereum (ETH). The page title 'Digital Surge - Withdraw ETH' suggests a fraudulent attempt to capture sensitive information from unsuspecting users.

Technical analysis reveals several indicators of malicious activity. The domain was created on February 21, 2026, and is registered through Name.com, Inc, with hosting services provided by Netlify. The domain resolves to the IP address 63.176.8.218, which is located in Germany under AS16509, associated with Amazon.com, Inc. This domain is flagged by two out of 95 security vendors on VirusTotal, indicating a low initial detection rate but a confirmed threat. It is listed on three security blocklists, including PhishDestroy and MetaMask, further confirming its malicious intent. The site is currently active and uses an SSL certificate issued by DigiCert Inc, which may falsely assure users of its legitimacy.

Despite being blocked by several security services, the domain remains active, presenting an ongoing risk to users. Immediate response actions should include further dissemination of the domain's threat status to additional security vendors and blocklist providers. Users are advised to avoid interaction with this domain and to verify the authenticity of any communication purporting to be from Binance. The continued presence of this domain underscores the need for heightened vigilance and robust security measures to protect against brand impersonation attacks.