evercrestgems[.]com[.]waforxste[.]cc

The domain evercrestgems.com.waforxste.cc has been identified as a high-risk phishing site impersonating the cryptocurrency exchange Binance. This domain, registered through Global Domain Group LLC on February 21, 2026, currently resolves to the IP address 198.12.66.123, which is located in the United States and is associated with the AS36352 HostPapa network. The site has been flagged by 10 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among security professionals. The Gridinsoft trust score for this domain is 0 out of 100, which is the lowest possible score and further corroborates the high-risk status of the site. The nameservers for the domain are 5772.ns1.abovedomains.com and 5772.ns2.abovedomains.com, suggesting the use of a less reputable domain hosting service that is often associated with malicious activities. The exact content of the site, as indicated by the page title 'Ever Crest Gems - Home,' has not been fully analyzed, but the impersonation of Binance and the cryptocurrency scam type suggest that the site is likely designed to deceive users into providing sensitive information or financial details. Defenders should immediately block this domain and warn users against visiting it, as the high risk of financial loss and data theft is evident from the available intelligence. Additionally, monitoring for any related domains or IP addresses is recommended to prevent further attacks.