minersfxtrade[.]ltd

On 24 July 2026 the domain www.minersfxtrade.ltd was observed to host a brand‑impersonation site that targets Binance users. The site was created on 21 February 2026 and is registered through Dynadot LLC. DNS resolution points to the Cloudflare‑owned address 172.67.147.81, which resides in the United States under ASN 13335 (Cloudflare, Inc.). The domain employs Cloudflare services, including HTTP/3, and its TLS certificate is issued by SSL Corporation via the Cloudflare TLS Issuing ECC CA 3 chain. Page metadata reveals the title “minersfxtrade.ltd – The best way to invest in crypto currency,” indicating a lure toward cryptocurrency investment and confirming the Binance impersonation claim.

Threat intelligence shows the domain appears on a single security blocklist and has been actively blocked by the PhishDestroy filtering service. VirusTotal analysis recorded detections by 2 of 93 scanning engines, suggesting that at least a minority of AV products have identified malicious activity associated with the domain. A Gridinsoft trust score of 44 / 100 further reflects a low confidence rating. Nameserver configuration lists “angela.ns.cloudflare.com” and “piers.ns.cloudflare.com,” consistent with the Cloudflare hosting environment.

As of the reporting date the domain is listed as offline, which may indicate a temporary takedown or a shift to another infrastructure. No additional indicators such as phishing page snapshots, compromised credentials, or payload URLs are available in the current dataset, leaving the exact content and attack vector unverified. Defenders should continue to block the domain and its associated IP address at perimeter defenses, monitor for re‑registration or similar domains using the same registrar or Cloudflare infrastructure, and incorporate the observed SSL fingerprint into TLS inspection rules.