radiant-tulumba-09e361[.]netlify[.]app

This domain, radiant-tulumba-09e361.netlify.app, is identified as a high-risk brand impersonation threat actively targeting Binance users. The site presents itself under the page title 'Crypto Assistance • Wallet Issues • Investment Guidance,' mimicking legitimate customer support services to deceive victims into disclosing sensitive credentials or financial information. Current intelligence confirms the domain remains operational and unmitigated, posing a significant risk to individuals seeking cryptocurrency-related assistance. Analysis indicates the domain is hosted on infrastructure associated with Netlify, resolving to the IPv6 address 2a05:d014:58f:6200::259, geolocated within Germany under Amazon.com, Inc. (AS16509). The SSL certificate, issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), provides a false sense of security while the domain is flagged by 11 of 95 security vendors on VirusTotal. Additional telemetry reveals the domain appears on a single security blocklist, with Google Safe Browsing explicitly categorizing it as phishing. No legitimate creation date or registration details are publicly disclosed, further obscuring its origins and intent. The domain remains active as of the latest verification, with no evidence of takedown or remediation efforts. Users are strongly advised to avoid interaction with radiant-tulumba-09e361.netlify.app and any associated links. Organizations should update blocklists to include this domain, while individuals should verify all cryptocurrency-related communications through official Binance channels. Enhanced monitoring of similar Netlify-hosted subdomains is recommended, given the platform's frequent exploitation for transient phishing campaigns.