binance123[.]com

This domain, binance123.com, is actively impersonating Binance, a major cryptocurrency exchange platform. Registered on December 5, 2024, through GoDaddy.com, LLC, the domain currently resolves to IP address 172.67.221.188, hosted on Cloudflare's network (AS13335) in the United States. Infrastructure analysis reveals a 301 HTTP redirect status, though no SSL certificate is present, which may indicate an attempt to evade detection or secure connections. The page title, written in Chinese, explicitly references Binance's official branding, login portal, and app download functionality, suggesting a targeted campaign against Chinese-speaking users. The domain appears on one security blocklist and has been flagged by 14 of 95 security vendors in a recent scan. A low trust score of 30/100 further supports its classification as high-risk infrastructure. While the exact scam mechanism remains unconfirmed due to limited analysis of the site's content, the domain aligns with known patterns of crypto scams, likely designed to harvest credentials or facilitate fraudulent transactions. Defenders should prioritize blocking this domain at the DNS or network level, particularly in environments where cryptocurrency-related activity is monitored. Given its active status and brand impersonation, continued monitoring for related infrastructure or secondary domains is recommended.