Security Report: 853753-binance.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2a958c24-ef3b-4cf5-abc3-38af7c8eb5ab Domain and IP registration (RDAP)/api/v1/rdap/2a958c24-ef3b-4cf5-abc3-38af7c8eb5abHow often this domain was scanned/api/v1/domain/stats/853753-binance.com Scan history for this domain/api/v1/domain/history/853753-binance.com?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 21 HTTP transactions. The main domain is 853753-binance.com and was registered 2 weeks ago.

Submitted URL: http://853753-binance.com

Effective URL:

https://853753-binance.com/en/review

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed Binance phishing page on 853753-binance.com using a fake 'unusual activity / email change' alert with Approve/Deny buttons; flagged by Google Safe Browsing for social engineering. Do not interact.

Risk Factors (4)

Google Safe Browsing Social Engineering (phishing) detection

Impersonation of Binance on a non-Binance, look-alike hostname (853753-binance.com)

Fabricated security-alert narrative designed to push the visitor into approving an account/credential change

Obfuscated JavaScript consistent with a phishing kit

Domain age information unavailable

Details

Page Title

Review | Binance

Scan Type

public

Domain Name Analysis

You're looking at domain '853753-binance.com' on the commercial generic top-level domain (.com) and has no subdomain. The second-level label '853753-binance' is 14 characters long containing three vowels alongside four consonants, plus six digits and one hyphen. It segments into 3 words: 853753, bin, ance. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

-} BINANCE Review your account We have detected unsual activity on your account, please review these actions before continuing. 1. Credential change We received a request to change the email addre...

Page Load Overview

0.36s

Total Load Time

153 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:548 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	172.67.191.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	104.21.89.187Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
21	2	-	-

Detected Technologies3

HTTP/3

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D9746CF519D16089160B277B9AA630E4FF3DA87B73448E86B54C5424EFC93A6C0E6F70

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:LrWn3tiYvEdxbeeetDHVOT+Pg/4NW1/uW8+9w:MTvEd5e3ZV++P3NW8V

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:348850:BAB0gEgFCQwAAZoAiAIJhLoGEcojJ8Jk1GAIhwFboBIAQOZMmBCEAglAtAEYA8zEAqKBCOCcQEgQuA6ZCCKaBAYUSRADAhp0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018101818181818

Perceptual Hash:8c327333d9327333

Difference Hash:253335b3b3b3b3b2

Wavelet Hash:191919191f1f1f1f

Color Hash:N/A

Other Hashes

Crop Resistant:ac2d4a2b2b6d8cac,acad4a2b2b4d2cac,ac8c6b2b2bcc2cac,80305c4d4d300882,253335b3b3b3b3b2

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 853753-binance.com