alphadigitalmarket[.]com

Analysis of alphadigitalmarket.com indicates a brand impersonation campaign targeting Binance. The domain was registered on July 05, 2025 through Atak Domain and resolves to the IP address 198.12.66.123, hosted in the United States under ASN36352 (HostPapa). Nameservers ns1.host-forest.com and ns2.host-forest.com serve the domain, and no SSL certificate is present, meaning the site operated without HTTPS. The page title returned by the HTTP response is "Home," but no further content has been captured, and the site is currently taken offline.

Reputation services rate the domain poorly: Gridinsoft assigns a trust score of 0/100, and Scamadviser records a trust score of 1/100. VirusTotal scans show that two of ninety‑five security vendors flagged the domain as malicious. The domain appears on one external blocklist and has been blocked by the PhishDestroy mitigation service. These data points collectively suggest a high likelihood that the site was used for Binance brand impersonation, a form of financial credential harvesting.

Uncertainty remains regarding the specific phishing payload, login form structure, or any credential‑stealing kits employed, as no page‑level forensic evidence is available. Defenders should continue to block the IP 198.12.66.123, add alphadigitalmarket.com to local and network‑wide blocklists, monitor the registrar Atak Domain for future registrations, and watch for additional domains using the same host‑forest.com nameservers. Ongoing vigilance is recommended to capture any re‑deployment of the infrastructure, especially given the low trust scores and limited detection coverage.