Security Scan Report: securitydomain-pa.binanceapi.bet

Response type:Plain texttext/plainHTTP 502The server returned plain text, not a web page. The screenshot shows the text as a browser displays it.
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is binanceapi.bet and was registered 9 months ago.

Submitted URL: https://securitydomain-pa.binanceapi.bet

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Unranked typosquat-style host serving a Google Account sign-in impersonation, flagged by Safe Browsing for social engineering and backed by a trycloudflare tunnel. Do not enter credentials.

Risk Factors (5)
Brand impersonation of Google on an unrelated, unranked domain
Google Safe Browsing Social Engineering detection
Use of a trycloudflare.com tunnel host (industrial-process-prominent-roger.trycloudflare.com) as backend
Deceptive, brand-mixing hostname (binanceapi.bet) with security-themed subdomain
Cisco Umbrella unranked domain presenting as a major brand
Domain age information unavailable

Details

Page Title

Sign in - Google Accountsfrom scan record

Scan Type

public

Domain Name Analysis

The domain name 'securitydomain-pa.binanceapi.bet' uses the .bet top-level domain with subdomain 'securitydomain-pa'. Count 10 characters in 'binanceapi' with five vowels and 5 consonants. Word splitting yields 3 words: bin, ance, api. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://securitydomain-pa.binanceapi.bet

Page Load Overview

8.63s
Total Load Time
2 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,048 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network83% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
83%
phishing scam
60%
finance banking
45%
adult content
28%
news media journalism
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
285.158.111.60Ashburn, Virginia, United States
AS202015HZ Hosting Ltd
1104.16.230.132Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
32--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1284583CF9230A03FFD73A4F6E990ED4EF2884DD1E64A4576BC71A91342EA5A61761330

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:YCrq3j6/8+Oq3j6/8+Iq3j6/8+tq3j6/8+eq3j6/8+BIsQISNt1/11oycIqo6/8t:YCKIf1oycOjT9c+JR4bQzxzF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1251958:bk/RSBYRDgJIqmA1AGiYCIWHYKIwYksjOB2A8CBIKQYZpDsAUmCNIrZ2wFIUUBckcCAwgoABKZ6YggFuohgEwFBBSgC8GAEO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870f0f0f0f0f0f0f
Difference Hash:4000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:07000000000

Other Hashes

Crop Resistant:4000000000000000

Scan History

Scan history not available

Unable to load historical scan data