binancez[.]net

Analysis of binancez.net indicates a malicious infrastructure designed to impersonate the Binance brand. The domain was registered on 14 February 2025 through GMO Internet Group, Inc. d/b/a Onamae.com. DNS records show a single MX entry (priority 40) pointing to mx156.hostedmxserver.com, and the A record resolves to 217.216.111.129, an address assigned to AS141995 Contabo Asia Private Limited located in Singapore. The host presents an SSL certificate labeled R12, which does not correspond to any known Binance certificate authority and therefore offers no legitimate trust.

The page title returned by the web server is “Home”, and the site has been classified as a crypto‑scam that targets Binance users. Reputation services have assigned a Gridinsoft trust score of 29 out of 100, and the domain appears on one security blocklist. PhishDestroy has already taken the domain offline, and VirusTotal reports that nine of ninety‑three scanning engines flag the domain as malicious. The limited detection footprint suggests that active phishing pages may have been removed, but the underlying infrastructure remains under observation.

Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurgence of the IP address or related MX host, and update detection rules to include the observed SSL certificate identifier and the specific page title. Indicators such as the registrar, creation date, and hosting ASN provide additional context for threat‑intel correlation. No further public content has been examined, so the current assessment relies solely on the enumerated technical artifacts.