myxfinancelive[.]xyz

The domain myxfinancelive.xyz was registered on September 11, 2025 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335) with the address 104.21.87.209 located in the United States. The site presently resolves to that IP but is reported as taken offline. Automated analysis assigns a Gridinsoft trust score of 0 out of 100, indicating a lack of legitimate reputation. No TLS certificate is present, leaving the HTTP connection unencrypted.

The page title returned by the server is the German phrase “Nur einen Moment…”, which provides no functional context. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal has recorded four detections out of ninety‑five scanners, corroborating its malicious nature. The site is associated with an “Airdrop Scam” phishing kit and is categorized as a brand‑impersonation campaign targeting Binance.

Evidence suggests the operators are leveraging the popular Binance brand to lure victims, likely through deceptive communications promising cryptocurrency airdrops. Because the site is offline, real‑time interaction is not possible, but the infrastructure footprint remains in place. Defenders should add the domain and its hosting IP to internal blocklists, monitor for any resurgence of the same IP or similar Cloudflare nameservers, and update email filters to flag Binance‑related lure content. Continuous watch on the associated IP and rapid sharing of this indicator with threat‑intel feeds is recommended.