download.vvtoken.top - phishunt.io

Binance

https://download.vvtoken.top/apk/BINANCEPOOL.apk Access site

Screenshot

Investigate

Domain download.vvtoken.top5 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 104.21.15.216

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://download.vvtoken.top/apk/BINANCEPOOL.apk

urlscan

Wayback

archive.today

Cert WE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

21 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+3.0 TweetFeed
+2.3 ASN reputation
+1.3 Suspicious TLD
+1.1 No CSP header
+0.8 Young domain
+0.6 Brand impersonation in path
+0.6 Registrar reputation
+0.5 Young certificate
+0.4 Long domain
+0.3 Free CA
+0.1 Deep subdomain

15 signals fired · detector v3.0.0

AI analysis AIBeta

Malware delivery

Site distributes a trojanized Android APK file presented as a Binance Pool application, likely delivering crypto-stealing or surveillance malware. Hosted on a .top domain via Cloudflare and flagged by TweetFeed threat intelligence. The file path directly references the spoofed brand.

TweetFeedBrand impersonation in pathNo brand links

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-22 · confidence 83%

Domain & Network

Whois

Registrar NameSilo, LLC

Network

IP 104.21.15.216

Country