binance-logins[.]org

Analysis of the domain binance-logins.org confirms it as a fraudulent crypto scam targeting AAVE users. The domain was registered on February 21, 2026, through Web Commerce Communications Limited (WebNic.cc) and resolved to the IP address 193.24.123.182, hosted on AS200593 (PROSPERO OOO) in Russia. At the time of detection, the page title displayed 'AAVE Price Prediction: Expert Analysis and Future Forecasts,' explicitly impersonating the AAVE cryptocurrency brand to deceive visitors. Security vendor detection on VirusTotal shows 7 of 93 engines flagged the domain as malicious, and it appears on at least one blocklist (PhishDestroy).

The SSL certificate is issued to aave-crypto.org, further indicating an attempt to mimic legitimate AAVE infrastructure. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as high-risk. Nameservers ns100.webnic.cc and ns101.webnic.cc are consistent with the registrar's infrastructure, though this alone is not indicative of malicious intent.

No evidence confirms the exact scam mechanics (e.g., fake wallets, credential harvesting, or token drainers), as the site is currently offline and no HTTP transaction logs or screenshots are available for deeper analysis. Defenders should treat this domain as confirmed malicious, block DNS resolution to 193.24.123.182, and monitor for re-registration or related domains under the same nameserver or IP range. If historical WHOIS or passive DNS data exists, it may reveal additional linked infrastructure for further takedown efforts.