fairtradeexperts[.]click

The domain fairtradeexperts.click was registered on September 18, 2025 through Global Domain Group LLC and is currently listed as offline. DNS resolution points to the IPv4 address 163.61.188.89, which belongs to AS153568 NEW DHAKA HARDWARE and is geolocated in the United States. Four name servers are observed: dns1.ecosWhitespace.com, dns2.ecosWhitespace.com, vip1.cupisweb.com, and vip2.cupisweb.com, suggesting a split‑hosting configuration often used to increase resilience. No TLS certificate was presented during connection attempts, indicating the site operated without HTTPS.

The sole visible page title, “FAIR-TRADE-EXPERT”, does not reference the targeted brand, yet the infrastructure is classified as a Binance brand‑impersonation campaign. Google Safe Browsing flags the domain for social engineering, and 7 of 95 security vendors on VirusTotal reported detections, reinforcing the malicious assessment. PhishDestroy has added the domain to its blocklist, and it also appears on a separate security blocklist. Gridinsoft assigns a trust score of 0 / 100, reflecting extreme risk.

Evidence confirms the domain’s intent to deceive Binance users, but the exact phishing payload, credential‑capture mechanisms, or supporting URLs have not been captured because the site is offline. Analysts should continue monitoring the associated IP address and name servers for re‑use, and incorporate the domain into inbound and outbound filtering rules. Blocking at the DNS layer, enforcing HTTPS‑only policies, and applying URL‑filtering based on the observed indicators will mitigate potential exposure. Threat‑intel feeds should be updated with the domain, its IP, and the observed name‑server set to aid downstream detection.