ihubtrader[.]com

Analysis indicates that the domain ihubtrader.com is actively impersonating Binance, a well-known cryptocurrency exchange platform. Registered on July 10, 2018, through GoDaddy.com, LLC, the domain currently resolves to the IP address 172.67.207.190, which is hosted on Cloudflare's infrastructure (AS13335) in the United States. The domain's nameservers, grannbo.ns.cloudflare.com and noah.ns.cloudflare.com, further confirm its reliance on Cloudflare services. The SSL certificate is issued by Google Trust Services, specifically under the WE1 intermediate. The page title, 'Cryptocurrency trading and invest platform,' aligns with the scam type classified as cryptocurrency fraud. As of July 12, 2026, the domain remains active and returns an HTTP 200 status, indicating operational functionality. Detection metrics reveal that 14 out of 93 security vendors on VirusTotal have flagged this domain as malicious. Additionally, the domain appears on one security blocklist and has been identified in a threat intelligence pulse on AlienVault OTX. Infrastructure analysis reveals the use of jQuery, Cloudflare Browser Insights, and HTTP/3, which are common technologies but do not inherently indicate malicious activity. The domain's creation date, several years prior to its current malicious use, suggests it may have been repurposed for fraudulent activities. Defenders are advised to monitor this domain closely, block access where necessary, and correlate any observed traffic with known Binance-related phishing indicators. The exact content and functionality of the site remain unanalyzed, but the available evidence supports its classification as a high-risk brand impersonation campaign targeting cryptocurrency users.