Phishing detection: binanceaa.com

Binance
https://binanceaa.com Access site
Screenshot
Screenshot of binanceaa.com
Investigate
Domain binanceaa.com1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 156.254.5.40
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://binanceaa.com
urlscan Wayback archive.today
Cert Let's Encrypt
crt.sh Censys Google CT
Phishunt analysis Beta
23 low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelurlscan.io
15 signals fired · detector v2.0.0
Domain & Network
Whois
Registrar July Name Limited
Network
IP 156.254.5.40
Country MalaysiaMalaysia
Hosting Cloudvalley Sdn. Bhd.
ASN AS154376
TLS Cert Let's Encrypt
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Related infrastructure Betasuspected links from shared infrastructure, not attribution
Suspected cluster #51 · 3 indicators · confidence High · targets: Binance
binancenn.com 72 same IP same nameservers similar name same registrar same TLS cert shared TLS SAN
active 2026-05-20
binanceii.com 72 same IP same nameservers similar name same registrar same TLS cert shared TLS SAN
active 2026-05-20
Top 2 of 2 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-05-20 21:10 UTC  ·  Last refreshed 2026-07-21 07:30 UTC