Security Report: www.binanceidentityportal.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7b0ddb99-966e-4f18-b19e-e4665cb61d0f Domain and IP registration (RDAP)/api/v1/rdap/7b0ddb99-966e-4f18-b19e-e4665cb61d0fHow often this domain was scanned/api/v1/domain/stats/binanceidentityportal.com Scan history for this domain/api/v1/domain/history/binanceidentityportal.com?limit=15

This website contacted 5 IPs in 3 countries across 4 domains to perform 7 HTTP transactions. The main domain is binanceidentityportal.com and was registered 2 weeks ago.

Submitted URL: https://www.binanceidentityportal.com/

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Coinbase-branded credential phishing on a 9-day-old binanceidentityportal.com domain; login/2FA data is exfiltrated via an embedded Telegram bot token. Do not enter credentials.

Risk Factors (5)

Brand impersonation of Coinbase on a non-Coinbase domain

Credential and 2FA harvesting form on a 9-day-old domain

Embedded Telegram bot token for exfiltrating submitted data

Cross-origin fetches to api.telegram.org and api.ipify.org from page scripts

Deceptive hostname combining Binance and an 'identity portal' label with unrelated Coinbase content

Domain age information unavailable

Details

Page Title

Coinbase - Sign in

Scan Type

public

Favicon Hash

MMH3: 910234581

MD5: 902bacdcf9631d11935484151497a89e

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.binanceidentityportal.com' is registered and includes subdomain 'www'. The core label 'binanceidentityportal' covers 21 characters with 8 vowels and 13 consonants. Tokenizing the label suggests 4 words: bin, ance, identity, portal. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.14s

Total Load Time

9 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:425 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software79% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

79%

cryptocurrency blockchain

41%

documentation technical

36%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	104.194.141.153	United Kingdom	AS198983'Tornado Datacenter GmbH & Co. KG'
1	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	149.154.166.110	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
1	172.64.152.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	5	-	-