Security Scan Report: bnb-promo.xyz

Redirected to: https://bnb-promo.xyz/welcome

Submitted: Mar 8, 2026, 8:04:35 AMCompleted: Mar 8, 2026, 8:05:43 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 1 HTTP transaction. The main domain is bnb-promo.xyz and was registered NaN years ago.

Submitted URL: https://bnb-promo.xyz/claim-rewards.html

Effective URL: https://bnb-promo.xyz/welcomeRedirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Site impersonates Binance on a brand‑new unranked domain with an email‑only form – high‑risk phishing.

Risk Factors
Brand impersonation on a newly registered domain
Domain age < 7 days (critical risk)
Unranked domain with high‑profile brand branding
Email capture form used for reward claim on suspicious site
Domain age information unavailable

Details

Page Title

CryptoNews

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

cryptocurrency blockchain

(89%)

Domain Information

Domain 'bnb-promo.xyz' uses the open generic top-level domain (.xyz) and has no subdomain. The second-level label 'bnb-promo' is 9 characters long split between 2 vowels and six consonants; bonus characters include one hyphen. Breaking it apart gives 3 words: b, nb, promo. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bnb-promo.xyz/claim-rewards.html

Page Load Overview

1.28s
Total Load Time
22
HTTP Requests
4
Domains
483 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:2,158 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain89% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
89%
finance banking
65%
healthcare medical
54%
news media journalism
45%
technology software
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.21.39.218United States
AS13335Cloudflare, Inc.
5172.217.20.131United States
AS15169Google LLC
5104.20.24.24United States
AS13335Cloudflare, Inc.
5142.250.201.74United States
AS15169Google LLC
224--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CD928526D2A3107259A394E573EB5399B1A0E007CC12CD597BFD0648CFCAEA4BAD375C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:VrFQ7jBp9S8tPL7Lq4rt08Z4VdeSAZ8Rsx/1akQT5pWXNhP/QYm9z/rSQ6YMvbW9:VrKNhx9cZonxKnnomdAMkdkz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20476:AhSpBpxDBVAxKB3OoPVTgIWIIQga2DCLMAWKBGywpjoUl5eIUla5QAAgSwUIxACYClgigERMSoYgUw0a70iwYxAb3FErogIJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00607078303c3c00
Perceptual Hash:c2653c3e6d933865
Difference Hash:39c5c5c1c77dddc9
Wavelet Hash:0070787c713d3f3d
Color Hash:#2d4386

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data