uuu[.]binanceltd[.]ltd

Analysis of the domain uuu.binanceltd.ltd, observed on July 29, 2026, indicates active malicious use consistent with a generic phishing campaign. VirusTotal records show that 18 of 91 security vendors have flagged the domain, demonstrating a measurable detection consensus across multiple scanning engines. The domain also appears on a single external blocklist and is explicitly blocked by the PhishDestroy mitigation service, reinforcing the assessment of malicious intent.

The elevated risk rating aligns with the observed vendor detections and blocklist presence, suggesting that threat actors are currently leveraging the domain to harvest credentials or other sensitive information. No additional infrastructure details such as registrar information, hosting IP, SSL certificate attributes, or HTTP response codes are available from the supplied intelligence, leaving the broader operational footprint of the infrastructure uncharacterized. Defenders should prioritize immediate containment actions: add uuu.binanceltd.ltd to network deny lists, enforce DNS sinkholing where possible, and ensure endpoint protection solutions are updated to reflect the 18 vendor detections.

Continuous monitoring for new indicators of compromise, including any emergence of related domains or IP addresses, is advised. Organizations should also educate users about unsolicited communications that reference Binance or related financial services, as the domain name appears crafted to evoke trust through the inclusion of “binance” within the subdomain hierarchy.