binance[.]be

Analysis indicates that the domain binance.be was registered on 21 March 2023 and is currently pointing to the loopback address 127.0.0.1. The authoritative name servers are ns1.openprovider.nl, ns2.openprovider.be and ns3.openprovider, all belonging to the OpenProvider hosting service. The domain is listed on a single public security blocklist and has been explicitly blocked by the PhishDestroy feed.

A VirusTotal scan was performed on 91 antivirus and sandbox engines; none reported a detection at the time of the scan, but the absence of detections does not constitute a safety guarantee. No additional indicators such as SSL certificates, HTTP response codes, page titles, or content hashes are available in the current intelligence set, leaving the exact phishing payload undefined. The infrastructure footprint is minimal, consisting solely of the loopback IP, which suggests the domain may be used as a placeholder or for redirection in a broader campaign.

Defenders should continue to treat binance.be as a high‑confidence phishing indicator, enforce DNS‑level blocking, add the domain to local deny lists, and monitor for any future resolution changes or content releases. Ongoing observation of the OpenProvider name‑server configuration and periodic rescans with VirusTotal or other sandbox services are recommended to capture any evolution of the threat. Until further evidence emerges, the domain remains active and should be considered unsafe for end‑users.