servicexvibin4nc3[.]hf[.]space

The domain servicexvibin4nc3.hf.space has been identified as a phishing site engaged in brand impersonation, specifically targeting Binance users. This domain was used in a cryptocurrency scam scheme and is currently taken offline. Its activities involved mimicking the Binance brand to deceive visitors, making it a risk for those searching if servicexvibin4nc3.hf.space is safe or a scam.

Technical investigation shows that servicexvibin4nc3.hf.space was registered through OVH, SAS on November 01, 2021, and resolves to the IP address 52.214.59.233 located in Ireland (AS16509 Amazon.com, Inc.). The SSL certificate was issued by Amazon / Amazon RSA 2048 M01. VirusTotal shows 0 of 95 vendors detect this domain as malicious, and Google Safe Browsing has not flagged it. However, servicexvibin4nc3.hf.space appears on one security blocklist, specifically PhishDestroy, and was observed to use the page title 'Hugging Face – The AI community building the future.' The current HTTP status is 404, indicating the site is offline.

Anyone who entered Binance credentials or interacted with the phishing page at servicexvibin4nc3.hf.space should immediately change their Binance password, enable two-factor authentication, and monitor accounts for unauthorized activity. If cryptocurrency wallets were connected, move funds to a new wallet and revoke any suspicious token approvals. It is also recommended to report related phishing attempts to Binance and relevant authorities to aid ongoing investigations.