Phishing detection: binanceaa.com
Binance Screenshot
Investigate
Domain
binanceaa.com1 CT host on apex
urlscan
VirusTotal
Whois
IP
156.254.5.40
ipinfo
Greynoise
URL
https://binanceaa.com
Phishunt analysis Beta
22
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 urlscan.io
- +3.7 Brand in domain label
- +1.9 Brand typo
- +1.1 ASN reputation
- +1.1 No CSP header
- +0.9 Young certificate
- +0.8 Young domain
- +0.7 Brand in cert SAN
- +0.7 Bulletproof DNS
- +0.6 Registrar reputation
- +0.3 Free CA
- +0.3 Long domain
- +0.2 Suspicious TLD
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Typosquatting domain impersonating Binance cryptocurrency exchange, part of a cluster of lookalike domains sharing the same Malaysian hosting infrastructure and abuse-flagged ASN. Flagged as malicious by urlscan; targets exchange login credentials.
Brand in domain labelASN reputationurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 65%
Domain & Network
Whois
Registrar
July Name Limited
Network
IP
156.254.5.40
Country
Malaysia
Malaysia
Hosting
Cloudvalley Sdn. Bhd.
ASN
AS154376
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Campaign
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists