binancenft[.]top

The domain binancenft.top was registered on May 03, 2025 through Gname.com Pte. Ltd. and resolves to the Cloudflare address 104.21.63.27, which is located in the United States and belongs to ASN 13335 (Cloudflare, Inc.). DNS resolution is serviced by major.ns.cloudflare.com and nicole.ns.cloudflare.com, indicating the use of Cloudflare’s authoritative name‑service. The site presented a page title of “Market-Blockchain” and is linked to a crypto‑related fraud campaign, as the intelligence tags it as a Crypto Scam targeting the Binance brand. An SSL certificate issued by Google Trust Services (WE1) was observed, confirming that the site employed a valid TLS certificate, a common tactic to lend credibility to fraudulent pages.

Technical fingerprints show a Vue.js front‑end, Cloudflare Browser Insights, and HTTP/3 support, all consistent with a modern web stack hosted behind Cloudflare’s edge network. The domain appears on one security blocklist and has been flagged by PhishDestroy, while the Gridinsoft trust score assigns a rating of 0 out of 100. VirusTotal analysis recorded detections from 2 of 95 scanning engines, reinforcing the suspicion of malicious intent.

The domain is currently taken offline, but its infrastructure—particularly the Cloudflare‑proxied IP and the use of a legitimate TLS certificate—remains reusable for future campaigns. Defenders should continue to block binancenft.top at DNS and proxy layers, monitor for any re‑registration or re‑activation of the same IP address, and add the domain to internal threat‑intel feeds. Additional scrutiny of related subdomains and any new registrations using the same registrar or similar naming patterns is recommended to pre‑empt re‑use of this infrastructure.