binancebep[.]org

This domain, www.binancebep.org, is actively impersonating Binance as part of a high-risk phishing operation. Registered on May 22, 2026, through GoDaddy.com, LLC, the domain resolves to 77.245.76.110, hosted on infrastructure belonging to IOMART CLOUD SERVICES LIMITED (AS20860) in the United Kingdom. The site returns an HTTP 200 status, indicating an operational frontend, and its page title, 'BEP20 Verification on chain - MAT,' suggests an attempt to deceive users into interacting with fraudulent blockchain verification processes. Analysis of the domain's nameservers (ns41.domaincontrol.com and ns42.domaincontrol.com) and SSL certificate (Let's Encrypt R12) reveals standard hosting configurations with no immediate anomalies, though the use of a free certificate aligns with common phishing tactics to appear legitimate. Infrastructure analysis indicates the presence of Ubuntu, Nginx, Bootstrap, and jsDelivr, a combination frequently observed in phishing kits due to its accessibility and ease of deployment. The domain is currently flagged by one security blocklist, and three of 91 security vendors on VirusTotal have detected it as malicious. While the exact content and functionality of the site remain unconfirmed, the combination of brand impersonation, active hosting, and detection by security tools warrants immediate defensive action. Defenders should prioritize blocking the domain and its resolving IP, monitoring for related infrastructure, and alerting users to the risk of Binance-themed scams. The domain's registration age (under two months) and continued activity suggest it may remain in use for the near term.