Security Scan Report: binance-com-0i.bonu.workers.dev

Redirected to:
https://binance-com-0i.bonu.workers.dev/en/agentic-hub?chain=bsc
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 1 country across 10 domains to perform 264 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: http://binance-com-0i.bonu.workers.dev/en/agentic-hub?chain=bsc

Effective URL:
https://binance-com-0i.bonu.workers.dev/en/agentic-hub?chain=bsc
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Binance Wallet on a lookalike workers.dev subdomain, reported as phishing, using wallet-connect and airdrop-claim lures. Do not connect a wallet or sign anything.

Risk Factors (5)
Impersonation of Binance on a non-Binance domain (workers.dev tenant)
Phishing threat-intel match on the primary domain (single-source, openphish.com)
Deceptive hostname mimicking a Binance URL
Wallet-connect / airdrop-claim flow designed to get users to sign transactions against an unknown operator
Unranked domain on a free shared-hosting namespace with unknown creation date
Domain age information unavailable

Details

Page Title

Binance Wallet

Scan Type

public

Domain Name Analysis

You're looking at domain 'binance-com-0i.bonu.workers.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'binance-com-0i.bonu'. Its registrable label 'workers' stretches across 7 characters holding two vowels versus 5 consonants. Word splitting yields one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

BINANCE ALLET Markets Trenches Trackers Signals new Prediction Perpetuals Portfolio new Rewards nual Kit Build Q Binance Wallet Extensio Search Keyless Security, Now In Powered by exclusive MA...

Page Load Overview

8.37s
Total Load Time
45.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:25,758 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(100%)🇷🇴ro(0%)

Website Classification

Primary Category

cryptocurrency blockchain84% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
84%
finance banking
68%
technology software
65%
education learning
49%
news media journalism
47%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
225188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22172.67.216.92Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22142.250.154.95Google · CDNUnited States
AS15169Google LLC
22104.21.72.124Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22142.251.13.94Google · CDNUnited States
AS15169Google LLC
26412--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E4B429662161532BBACB87989632AA8BB511F69FFC3399DCF2BC07701BCDEC18C11554

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:4iLwTxu5wEOj2DwQ+RYT6bH/wrmugsE7jnpqlZvxAjhvHf01zD/:4iLwTxu5wEOj2DwS3UevxAjR+b

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:511746:jiIh4VACF0ZAFGwGGjMgBQEBKpAIgClFBAEjsOUAEELEA+XAQUwTyAeANoZAEJhfZIPqKEax0gxVwoLhFBwVACDQDDwyQCgC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c0000
Perceptual Hash:ca03747e61c3da3c
Difference Hash:0171696969696101
Wavelet Hash:81813d7d3dfd81c1
Color Hash:31000008440

Scan History

Scan history not available

Unable to load historical scan data