add download-binance.online to wildcard domain list

[g0d33p3rsec]

Phishing Domain/URL/IP(s):

download-binance.online
https://download-binance.online/
https://download-binance.online/binance-setup.exe
https://download-binance.online/BinanceSetup.zip

Impersonated domain

https://www.binance.com/

Describe the issue

This domain is hosting a Binance lure and distributing binaries containing Poverty Stealer.

Related external source

https://urlscan.io/search/#page.domain%3Adownload-binance.online
https://urlscan.io/result/bbf80d5c-bfe9-42bb-b658-53b6418cd79f/
https://www.virustotal.com/gui/file/9b85fb69d2828fe57a9994afa64905970a9941e809a3a3c6be8a87159f72f1c8/
https://tria.ge/240729-t5h1fsxhkq/behavioral1
https://www.shodan.io/host/147.45.47.178
https://search.censys.io/hosts/147.45.47.178?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=download-binance.online&at_time=2024-07-29T11%3A00%3A26.701Z

Screenshot

Click to expand