marketbinance[.]com

This domain, marketbinance.com, was registered on April 21, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and is actively impersonating the Binance cryptocurrency exchange brand. Infrastructure analysis reveals the domain resolves to IP address 104.21.50.84, hosted on Cloudflare’s network in Canada, with nameservers natasha.ns.cloudflare.com and troy.ns.cloudflare.com. The site presents itself as a 'Professional Crypto Trading Dashboard,' as indicated by its page title, aligning with the stated scam type of brand impersonation. A 301 HTTP redirect is currently in place, suggesting the domain may be part of a larger redirection chain or staging phase for malicious activity. Security vendor detections are notable, with 14 of 94 engines flagging the domain on VirusTotal, and Google Safe Browsing classifying it under SOCIAL_ENGINEERING. The domain appears on at least one security blocklist, specifically PhishDestroy, and holds a Gridinsoft trust score of 0/100, reinforcing its high-risk classification. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites due to its accessibility. Technologies detected include Cloudflare CDN and HTTP/3, which are frequently used to obfuscate hosting origins and improve performance, though they do not inherently indicate malicious intent. At present, the domain remains active, and while the exact content and functionality of the site have not been analyzed, the combination of brand impersonation, social engineering flags, and security vendor detections strongly suggests it is being used for fraudulent purposes. Defenders are advised to block the domain at the DNS or proxy level, monitor for related infrastructure (e.g., IP 104.21.50.84, Cloudflare nameservers), and alert users to the risks of interacting with unsolicited cryptocurrency trading platforms.