Security Scan Report: binance-com-0i.bonu.workers.dev

Redirected to:
https://binance-com-0i.bonu.workers.dev/en/signals?chain=bsc
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 10 domains to perform 264 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: http://binance-com-0i.bonu.workers.dev/en/signals?chain=bsc

Effective URL:
https://binance-com-0i.bonu.workers.dev/en/signals?chain=bsc
Redirected

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Binance-branded wallet site on a lookalike binance-com workers.dev subdomain, flagged as phishing by OpenPhish, funneling visitors into wallet connection and airdrop claims typical of crypto drainers. Do not connect a wallet.

Risk Factors (6)
Brand impersonation of Binance on a non-official workers.dev subdomain
Phishing report on the primary domain from OpenPhish (single-source)
Deceptive hostname embedding 'binance-com' in a free hosting subdomain
Wallet-connect / airdrop-claim funnel consistent with cryptocurrency draining
Includes an eval() call in page scripts
No reputation / unranked domain on shared hosting
Domain age information unavailable

Details

Page Title

Binance Wallet

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'binance-com-0i.bonu.workers.dev' is registered; it also runs on subdomain 'binance-com-0i.bonu'. The registrable portion 'workers' spans 7 characters containing two vowels alongside five consonants. Word splitting yields one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

BINANCE ALLET Markets Trenches Trackers Signals new Prediction Perpetuals Portfolio new Rewards nual Kit Build Q Binance Wallet Extension Search Keyless Security, Now In Powered by exclusive MF...

Page Load Overview

11.13s
Total Load Time
57.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:25,759 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(100%)🇷🇴ro(0%)

Website Classification

Primary Category

cryptocurrency blockchain84% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
84%
finance banking
68%
technology software
65%
education learning
49%
news media journalism
47%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
227188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24151.101.193.229Fastly · CDNUnited States
AS54113Fastly, Inc.
24142.251.14.95Google · CDNUnited States
AS15169Google LLC
24172.67.216.92Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.83.69Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
26411--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169B429662121532BBACB879896326A8BB511F69FFC3399DCF2BC07B05BCDEC18C11554

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:4iLKcfinCpOj2DwQ+RYT6bH/wrmuosE7jnpqlZvxAjhvHf01zDd:4iLKcfinCpOj2DwS3MevxAjR+Z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:511747:HCECCHsBKVikASTOALdgAAhaYORCGylAQwIy8wYMk4pFBiolQFRMANKa7IAQhDCKijASqEAWghjQBAjnAlpQAANInAlOQSB4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c0000
Perceptual Hash:ca01757e61c3da3c
Difference Hash:0171696969696101
Wavelet Hash:81813d7d3dfd81c1
Color Hash:31000008440

Scan History

Scan history not available

Unable to load historical scan data