binanceido[.]com

Analysis of the domain binanceido.com indicates a brand-impersonation threat targeting Binance, classified as a crypto scam. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with phishing infrastructure. Infrastructure analysis reveals nameservers expire1.gname-dns.com and expire2.gname-dns.com, both operated by the same registrar, suggesting centralized control over DNS resolution. The domain resolved to IP address 172.245.147.205, hosted on AS36352 (HostPapa) in the United States.

Detection data shows the domain was flagged by one security blocklist and was actively blocked by PhishDestroy. Three of 93 security vendors on VirusTotal identified the domain as malicious, providing further evidence of its fraudulent nature. The SSL certificate, issued under the R11 root, does not mitigate the threat, as phishing domains commonly use valid certificates to appear legitimate. The page title 'Home' offers no additional context beyond the domain's branding, which closely mimics Binance’s naming conventions.

As of July 23, 2026, the domain has been taken offline, though defenders should remain cautious of re-emergence under similar naming schemes or infrastructure. Organizations are advised to monitor for domains registered through Gname.com Pte. Ltd. with Binance-related keywords, particularly those using Gname-operated nameservers. Network-level blocking of the observed IP (172.245.147.205) and nameserver domains may prevent future iterations of this campaign. While the exact content of the site was not analysed, the available evidence confirms its classification as a crypto scam impersonating Binance.