blnance.xyz
Appeared in the .xyz zone on Monday, September 21, 2026; by the end of that day the census found active website about crypto web3. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
blnance.xyz is an l-for-i typosquat of binance.com serving a pixel-level Binance UI clone (rebranded 'BIVARCE') on Vercel; the 'scenario / simulated trading, no personal data required' disclaimer does not explain why a Binance-typosquat name was registered, so this reads as a brand-squat hosting a staged exchange clone that can be flipped to credential/deposit capture — not yet a live credential harvest, hence abuse rather than phishing.
Domain 'blnance.xyz' is a typosquat of Binance (one character substitution: l for i). The page presents itself as 'BIVARCE' (a different brand name) with a crypto exchange interface and sign-up form, but explicitly states 'No email, password or personal data required — the scenario creates a local session only.' This disclaimer suggests a legitimate demo/sandbox, but the typosquat domain name paired with a functional sign-up form mimicking a real exchange creates ambiguity about intent—it could
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, September 21, 2026
Same data as JSON: /api/zone/domain/blnance.xyz. This page is not indexed by search engines and does not link to the site it describes.