Is binance-bitcoin.xyz safe?

No. MalwareAnalyzer scanned binance-bitcoin.xyz on 20 Aug 2026 and returned a malicious verdict with a score of 100 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was binance-bitcoin.xyz checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

binance-bitcoin.xyz - malicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned binance-bitcoin.xyz and returned a malicious verdict (score 100), categorised as phishing. The page resolved to 143.244.211.82 on DigitalOcean, LLC in US. The domain was registered 196 days ago through NicNames, Inc.. 10 domains and 5 IPs were contacted, over 121 HTTP requests. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 100) · Confidence 100%
Scanned URL: https://binance-bitcoin.xyz/
Domain: binance-bitcoin.xyz · IP: 143.244.211.82 · AS14061 · US
Page title: binance-bitcoin.xyz — For Sale on Doma
HTTP status: 200 · text/html; charset=utf-8
Registrar: NicNames, Inc. · domain age 196 days · created 2026-02-05
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Nov 17 21: · subject CN=binance-bitcoin.xyz
HTTP requests captured: 121 · cookies set: 5 · outgoing links: 3
Scan tier: standard · observed 2026-08-20 13:30:20 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Runtime data beacon to posthog-mainnet.doma.xyz
Domain impersonates binance (combosquat)
Runtime data beacon to api.hypelab.com
Abuse-heavy TLD .xyz
Certificate issued < 48h ago

Detected technologies

Next.js
Google Analytics

Contacted infrastructure

143.244.211.82 - AS14061 DigitalOcean, LLC (United States)
142.250.195.232 - AS15169 Google LLC (India)
142.251.222.14 - AS15169 Google LLC (Japan)

Observed indicators

binance-bitcoin.xyz
cdn.doma.xyz
www.googletagmanager.com
api.hypelab.com
agent.binance-bitcoin.xyz
app.doma.xyz
www.agentroot.io
posthog-mainnet.doma.xyz
www.google-analytics.com
api.doma.xyz
143.244.211.82
172.66.157.73
104.26.13.219
142.250.195.232
142.251.222.14
https://binance-bitcoin.xyz/
https://cdn.doma.xyz/_next/static/media/AktivGroteskVF_WghtWdth-s.p.0p0h3tv_x9o1q.ttf?dpl=50d47145b24e8114c11ae70ca7eb2805f007381d
https://cdn.doma.xyz/_next/static/media/doma-logo-transparent.0e.p.n954vmw5.svg?dpl=50d47145b24e8114c11ae70ca7eb2805f007381d
https://cdn.doma.xyz/_next/static/chunks/11-n~x-dd1.j2.css?dpl=50d47145b24e8114c11ae70ca7eb2805f007381d
https://cdn.doma.xyz/_next/static/chunks/0q7.c0kwbc5ux.css?dpl=50d47145b24e8114c11ae70ca7eb2805f007381d

Questions about binance-bitcoin.xyz

Is binance-bitcoin.xyz safe?: No. MalwareAnalyzer scanned binance-bitcoin.xyz on 20 Aug 2026 and returned a malicious verdict with a score of 100 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was binance-bitcoin.xyz checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of binance-bitcoin.xyz

Scanned on MalwareAnalyzer by Cyble · Open interactive scan