binance-fly[.]com

PhishDestroy first observed binance-fly.com on Apr 21, 2026. The hostname explicitly references Binance; stored content metadata identifies the same apparent target. The captured page title is “币安交易所官网 | 全球领先加密货币交易平台 - 安全交易，币安引领加密未来”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 100/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, DNS security resolvers, and URLQuery. VirusTotal recorded 15 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, SOCRadar, Sophos, VIPRE on Jul 27, 2026 at 03:29 UTC. DNS security checks returned 1 blocking result across 12 tested policies: Brand Binance; no observation timestamp was retained. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 02:20 UTC. Google Safe Browsing returned no flag on Apr 21, 2026 at 11:06 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:41 UTC. PhishStats returned no feed match on Apr 21, 2026 at 11:07 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the domain list Fewmoretaps OU d/b/a Trustname.com as the registrar and Apr 21, 2026 as the creation date. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 176.123.1.175 on AS200019 (ALEXHOST SRL). The recorded endpoint location is Chisinau, MD. The stored server header is nginx/1.24.0 (Ubuntu). The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Jul 8, 2026; checked Apr 21, 2026 at 11:46 UTC.

The content indicators and 3 positive source findings support the current Binance-themed brand impersonation classification.