accounts[.]maxweb[.]black

Analysis of the domain accounts.maxweb.black indicates a confirmed phishing campaign targeting Binance users, classified as a crypto scam. The domain was registered on March 13, 2025, through Amazon Registrar, Inc., and currently resolves to the IP address 43.159.94.13, hosted in Singapore under AS139341 (ACE). At the time of assessment, the domain is offline, though it previously presented a page titled 'Log In | Binance,' directly impersonating the Binance authentication portal.

Security vendor detections on VirusTotal report 14 flags out of 95 scans, while the domain appears on one security blocklist, specifically PhishDestroy. The absence of an SSL certificate further reduces its legitimacy, corroborated by a Scamadviser trust score of 1 out of 100. Infrastructure analysis reveals the domain utilizes Amazon Route 53 nameservers (ns-1877.awsdns-42.co.uk, ns-1226.awsdns-25.org, ns-788.awsdns-34.net, and ns-416.awsdns), suggesting reliance on cloud-based hosting infrastructure.

While the domain is currently inactive, the combination of brand impersonation, low trust scores, and detection by security vendors confirms its malicious intent. Defenders are advised to block the domain and associated IP address at the network level, update endpoint protection signatures, and monitor for resurgence under similar naming conventions or hosting providers. No additional evidence of the phishing kit or user interaction data is available at this time.