binance-fans[.]com

The domain binance-fans.com was registered on 21 April 2026 and is currently active. Its sole page returns HTTP 200 and presents the title “币安交易所 | 全球领先加密货币交易平台 - 安全交易，瞬间提现，开启数字财富之旅”, directly referencing the Binance brand. The site is classified as a brand‑impersonation scam targeting Binance users, and the risk level is marked as high. Technical analysis shows the domain resolves to the IPv4 address 176.123.1.175, which is hosted by Alexhost SRL in Moldova. The authoritative name servers are ares.trustname.com and zeus.trustname.com, both associated with the registrar Fewmoretaps OU doing business as Trustname.com. The site uses a Let’s Encrypt certificate (E8) that is currently valid, providing encrypted HTTPS connections without indicating any additional certificate anomalies. Reputation services reinforce the malicious profile: Gridinsoft assigns a trust score of 0 out of 100, and AlienVault OTX includes the domain in a single threat‑intel pulse. VirusTotal reports detection by 2 of 95 security vendors, and the domain appears on at least one public blocklist, with PhishDestroy explicitly blocking it. These signals, combined with the high‑risk brand‑impersonation label, demonstrate a concerted effort to lure Binance users into fraudulent interactions. Defenders should immediately block binance-fans.com at the DNS and web‑proxy layers, and consider adding the hosting IP 176.123.1.175 to network‑level deny lists. Monitoring of the associated name servers ares.trustname.com and zeus.trustname.com is advised, as they may be reused for additional malicious domains. Organizations should update user‑awareness campaigns to highlight that Binance does not use the “binance‑fans.com” domain and that any unsolicited requests for account credentials from such URLs should be reported. Continuous threat‑intel feeds should be consulted for new indicators related to this infrastructure.