binance-support-service[.]blogspot[.]com

The domain binance-support-service.blogspot.com was created on July 31, 2000 and is hosted on Google’s Blogger service. It resolves to IP address 142.250.185.193, which belongs to AS15169 Google LLC and is geolocated in the United States. The site presents a page title of “binance support”, explicitly targeting the Binance brand, and is classified as a crypto‑scam that impersonates Binance. Infrastructure analysis shows the site is served over HTTPS using a Google Trust Services / WE2 certificate, and its DNS is managed by Google’s authoritative nameservers (ns1‑ns4.google.com). The registrar listed is MarkMonitor, Inc., a provider often used for legitimate brand protection, suggesting the domain may have been acquired through a legitimate channel but later repurposed for abuse. Technical fingerprints reveal the presence of Blogger, Java, Python, OpenGSE, Google AdSense, and HTTP/3, all consistent with a standard Blogger deployment.

Detection data indicates that ten of ninety‑three VirusTotal scanners have flagged the domain, and it appears on at least one public security blocklist. PhishDestroy has also blocked the domain, and Gridinsoft assigns it a trust score of 0 / 100, reinforcing the high‑risk assessment. The HTTP response code is 200, confirming the site is actively serving content. No additional intelligence such as OTX tags or Safe Browsing identifiers is available, and the exact page content has not been examined, leaving the specific phishing or credential‑harvesting mechanisms uncertain.

Defenders should treat the domain as malicious and block it at network perimeters and endpoint filters. Continuous monitoring of DNS resolutions for 142.250.185.193 and of any new Blogger subdomains referencing Binance‑related keywords is advised. Organizations using Binance services should educate users about the impersonation risk and enforce multi‑factor authentication.