Security Scan Report: x8-binance.vip

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 12 HTTP transactions. The main domain is x8-binance.vip and was registered 11 months ago.

Submitted URL: https://x8-binance.vip/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Binance site on x8-binance.vip impersonating the exchange and serving a sideloaded 'Binance' APK, with hidden links to more lookalike domains. Do not download or install; use binance.com only.

Risk Factors (5)
Brand impersonation of Binance on the unrelated domain x8-binance.vip
Distribution of an APK installer from an impersonating domain
Hidden links to a cluster of additional Binance-lookalike domains
Unranked domain presenting itself as a top global exchange
SEO spam content used to rank for official-brand download searches
Domain age information unavailable

Details

Page Title

币安官网下载app - 安卓iOS官方下载安装

Scan Type

public

Domain Name Analysis

Within the .vip top-level domain, 'x8-binance.vip' is registered and has no subdomain. The registrable portion 'x8-binance' spans 10 characters split between three vowels and five consonants, notching 1 digit and 1 hyphen. Splitting it apart reveals four words: x, 8, bin, ance. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://x8-binance.vip/

Page Load Overview

2.20s
Total Load Time
55 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:3,201 chars
Detector Agreement:40%

Website Classification

Primary Category

cryptocurrency blockchain90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
90%
finance banking
89%
adult content
60%
technology software
60%
government public service
51%

Detected Features

Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3118.139.164.57Singapore, Singapore
AS26496GoDaddy.com, LLC
3218.60.100.155China
AS4837CHINA UNICOM China169 Backbone
3117.187.133.33China
AS138407The Internet Data Center of Guizhou Mobile Communication Company Limited
343.169.95.124Singapore
124--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FBE273B792F1487F21B381C5B66A333A25F5A147C81E2510BBBD0BA88FCAF55F917109

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:iSzyUJS+Fc08lT/qyQos7/HITFYEnNcswOvkfoFdb8+wQdS1/o0vnJwk2y:tscHI6aBMwFJ8PnJwk2y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:32309:A2oATE5TQCjkiABLQBAhhWKJmsACbihQKkgUAoANkakCgwEMAA4AAnqVoBKglH3GKUJgARGAYQZEAJAYh5hV6JAAkKggQgPl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f9f6f3f3f3f7fbff
Perceptual Hash:e46d9b196949696c
Difference Hash:2b042626260d03cf
Wavelet Hash:80f4e0e1e1e7e173
Color Hash:#e06cb1

Other Hashes

Crop Resistant:2b042626260d03cf

Scan History

Scan history not available

Unable to load historical scan data