Security Scan Report: bullnbear-pump.pages.dev

Submitted: Nov 13, 2025, 10:33:03 PMCompleted: Nov 13, 2025, 10:34:10 PMpubliccompleted
Loading additional data...

Summary

This website contacted 27 IPs in 0 countries across 7 domains to perform 306 HTTP transactions. The main domain is bullnbear-pump.pages.dev.

Submitted URL: https://bullnbear-pump.pages.dev/

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

High‑risk phishing site impersonating Binance on an unranked domain.

Risk Factors
Brand impersonation / typosquatting
Unranked domain used for major brand
Suspicious financial‑style OCR text likely intended to create urgency
Domain age information unavailable

Details

Page Title

BULL 'N' BEAR

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

cryptocurrency blockchain

(73%)

Domain Information

Domain 'bullnbear-pump.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'bullnbear-pump'. The core label 'pages' covers 5 characters containing two vowels alongside 3 consonants. Splitting it apart reveals 1 word: pages. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bullnbear-pump.pages.dev/

Page Load Overview

26.51s
Total Load Time
306
HTTP Requests
7
Domains
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:9,849 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain73% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
73%
entertainment media
63%
gambling betting
58%
technology software
51%
adult content
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20150.240.162.194UnknownUnknown
11163.181.92.201UnknownUnknown
11163.181.92.207UnknownUnknown
1163.34.64.86UnknownUnknown
11142.250.181.227UnknownUnknown
11172.66.47.113UnknownUnknown
11188.114.97.3UnknownUnknown
11163.181.92.202UnknownUnknown
1152.213.131.243UnknownUnknown
11163.181.92.208UnknownUnknown
30627--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T183A46630E14213BD965F4DE9B570B729A5EBD39DC54BD104B2AC02872BC6C9EDCF2298

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:B4qJprKVZ6tM3Xivg5REeevqLB4KaTx7u7GWGzFUhAeXt8Mw5btXENOoA4GTN4+l:BRJMdwv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:467040:EpIJ0YAsmIDCgkCUgg8EwYABDBKxK1G4CASAdInUBBFU4BBhRpg2qEpQJ0BgICXUoRAGliclFgQgBTUASTiAAkCFZAErCIMN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0084bffdffffff00
Perceptual Hash:ba367cb038b93a92
Difference Hash:0d2d694949494969
Wavelet Hash:8004bdbdbdbdbd00
Color Hash:#8ebf40

Other Hashes

Crop Resistant:0d2d694949494969

Scan History

Scan history not available

Unable to load historical scan data