binace[.]cam

This domain, binace.cam, is flagged for brand impersonation targeting Binance, a major cryptocurrency exchange platform. Analysis indicates the site masquerades as a decentralized finance (DeFi) portal, as evidenced by its page title, 'Axiom — The Gateway to DeFi.' The infrastructure is designed to deceive users into believing they are interacting with a legitimate Binance service, likely aiming to harvest login credentials or facilitate unauthorized transactions. Infrastructure analysis reveals the domain was registered on May 15, 2026, through Dynadot Inc, a known registrar frequently associated with malicious domains. It resolves to the IP address 104.21.9.205, a Cloudflare-associated address often leveraged to obscure hosting origins. Detection metrics show 3 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on two security blocklists. The domain employs a Google Trust Services SSL certificate, which may lend an air of legitimacy to unsuspecting users. Additionally, the domain was identified in one threat intelligence pulse on AlienVault OTX, further corroborating its malicious intent. As of the latest assessment, binace.cam has been taken offline, likely due to enforcement actions by security providers such as PhishDestroy and OISD, which had previously blocked access. Despite its current offline status, the domain remains a residual risk due to potential re-activation or migration to alternative infrastructure. Users are advised to verify domain authenticity through official channels and monitor for unauthorized access to accounts associated with cryptocurrency platforms. Organizations should maintain updated blocklists and conduct retrospective analysis to identify any prior interactions with this domain.