beqwpe[.]com

This domain, beqwpe.com, poses a significant threat of brand impersonation, specifically targeting the well-known cryptocurrency platform Binance. The domain was used to create a deceptive webpage titled 'defi mining,' which is designed to mislead users into believing they are interacting with legitimate Binance services. This deceptive content could lead to unauthorized access to user credentials, financial information, or other sensitive data, thereby elevating the risk level to 'elevated.'

Analysis indicates that beqwpe.com has been flagged by 13 out of 95 security vendors on VirusTotal, a clear indication of its suspicious nature. The domain was registered through Gname.com Pte. Ltd. on December 25, 2025, and has been identified and listed on 2 security blocklists. The low Gridinsoft trust score of 0/100 further corroborates the domain's malicious intent. Infrastructure analysis reveals that the domain resolved to the IP address 104.26.13.42, which has been associated with phishing activities. The domain is currently offline, but users should remain vigilant as similar domains may be used in future campaigns.

If users have visited beqwpe.com, they should immediately change their Binance account passwords and enable two-factor authentication (2FA) if not already in place. It is also recommended to monitor account activity for any unusual transactions and to report the incident to Binance's customer support. Additionally, users should run a comprehensive security scan on their devices to ensure no malware was installed during the visit. Staying informed about the latest security advisories and practicing safe browsing habits can help prevent future encounters with such threats.