bbinance.org
Appeared in the .org zone on Saturday, October 17, 2026; by the end of that day the census found parked, for sale. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name 'bbinance.org' is a doubled-letter typosquat of Binance, and Binance does not own it. It redirects to a Chinese '最新@网址' password-gate link hub on urldance.com, with a 'get latest access password' button and a Xunlei-group link to 8uri.cn. That hub is the shape of a gated adult, gambling or piracy funnel, shared across 518 identical pages. Nothing on the destination imitates Binance or asks for credentials, so this is a brand-squat used for traffic diversion rather than phishing.
bbinance.org is a typosquat of Binance that redirects to an unrelated third-party service (urldance.com). The domain name uses 'binance' to deceive visitors into accessing a credential-harvesting or password-gating scheme hosted elsewhere; this is classic brand-squat infrastructure. The 518-domain cluster and password-form pattern confirm a coordinated abuse campaign, not phishing of a specific impersonated brand but rather exploitation of the Binance name to drive traffic to malicious content.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Saturday, October 17, 2026
Same data as JSON: /api/zone/domain/bbinance.org. This page is not indexed by search engines and does not link to the site it describes.