binance27[.]com

The domain binance27.com was registered on July 27, 2024 through Gname.com Pte. Ltd. and is currently hosted on the IP address 103.60.148.139, which resolves to a Hong Kong location under AS132839 POWER LINE DATACENTER. The authoritative nameservers a10.share-dns.com and b10.share-dns.net resolve to the same host, indicating a single‑point hosting arrangement. The site presents an HTTPS certificate issued by Let’s Encrypt (R13) and returns HTTP status 200, confirming that the web service is operational. A scan of the page identified the title "哈希游戏| 哈希游戏平台| 哈希游戏官方网站", revealing that the content is presented in Chinese and does not directly reference the Binance brand, yet the domain is explicitly marked as impersonating Binance.

Technology fingerprinting shows the use of Bootstrap, Nginx, Slick, jQuery, HSTS, and fullPage.js, a stack commonly employed by low‑cost malicious sites. Security telemetry lists the domain on one public blocklist and notes that PhishDestroy has already blocked it. Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports a single positive detection out of 95 scanned engines, confirming at least one vendor’s identification of malicious activity. The overall risk rating is high and the domain remains active.

Defenders should immediately add binance27.com and its resolved IP 103.60.148.139 to network‑level blocklists, enforce URL filtering for any connections to the host, and monitor for related traffic patterns. Given the low trust score and the confirmed brand impersonation, threat‑intel feeds should be updated to flag the domain as a crypto‑related scam, and any credential‑capture or fund‑transfer mechanisms observed in future traffic should be treated as compromised. Continuous re‑scanning is advised, as additional detection engines may surface new indicators.