VirusTotal
0 / 92 engine detections
Ouvrir le rapport“币安Binance官网入口|币安注册 币安交易所”
Usurpation de Binance: apk-binance.com.cn — Dernier actif connu (HTTP 200). Résumé des preuves: VirusTotal 0/92; URLScan capture; 2 external blocklist matches…
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
0 / 92 engine detections
Ouvrir le rapportScan report
Ouvrir le rapportno community references
Ouvrir le rapportScan report
Ouvrir le rapportNo threat flag
Ouvrir le rapportPage capture
Ouvrir le rapportResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
PhishDestroy’s intake AI classified the page as malicious because it impersonates Binance, using the brand name and offering registration and app download, a pattern linked to credential theft. The domain was first seen by PhishDestroy on 2026-10-21, when an HTTP 200 response returned the recorded title “币安Binance官网入口|币安注册 币安交易所”.
Fake exchange pages copy the visual design of a legitimate platform and present login or sign‑up forms to capture user credentials. They often host or link to counterfeit mobile apps that can harvest authentication tokens or install malware, enabling attackers to access the victim’s real account and move funds.
VirusTotal scanned the domain on 2026-10-21 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked the same day and did not flag the site. OTX listed no pulses for the domain on that date. urlscan.io captured the site on 2026-10-21; its machine‑learning engine marked it malicious with a score of 100, categorising it as phishing and associating it with the Binance brand. External blocklists MetaMask and SEAL also listed the domain, and PhishDestroy’s internal blocklist marks it as malicious.
The recorded IP was 168.222.65.180, which belonged to OWGELS INTERNATIONAL CO., LIMITED in Hong Kong. TLS was provided by a LiteSSL RSA CA 2025 certificate valid from 2026-10-21 to 2027-01-19. The domain age, apex age and TLS age were recorded as zero days, indicating a newly created registration. Authoritative nameservers were ns1.myhostadmin.net and ns2.myhostadmin.net.
Users should not enter Binance credentials on this site; if they have, they should change their Binance password and review account activity. They should also avoid downloading any applications linked from the page. Defenders should add apk-binance.com.cn to blocklists, monitor access logs for requests to this exact hostname, and apply appropriate filtering for the recorded nameservers.
Stored page, network and scanner observations, grouped by source and observation time.
Observé: · Retrieved:
| Uuid | 01a15f12-c437-72eb-8dae-64e1118551e4 |
|---|---|
| Final url | https://apk-binance.com.cn/ |
| Statut | 200 |
| Redirigé | https-only |
| Redirects | [
{
"to": "https://apk-binance.com.cn/",
"from": "http://apk-binance.com.cn/",
"status": 307
}
] |
| Ip | 168.222.65.180 |
| Contacted IP addresses | [
"168.222.65.180"
] |
| Asns | [
"153656"
] |
| Countries | [
"HK"
] |
| Linked domains | [
"download.bsmkweb.cc",
"www.bsmkweb.cc"
] |
| Document hash | 8f09961e9ea104a00cb92fec9a783521aa537aed6b2452aaf180e9f56cb75054 |
| Tls | {
"san": [
"apk-binance.com.cn"
],
"cipher": "AES_256_GCM",
"issuer": "LiteSSL RSA CA 2025",
"subject": "apk-binance.com.cn",
"protocol": "TLS 1.3",
"valid_to": "2027-01-19T04:59:59Z",
"valid_from": "2026-10-21T05:00:00Z"
} |
| Domain age days | 0 |
| Apex age days | 0 |
| Tls age days | 0 |
| Tls valid days | 89 |
| Requests | 1 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 100,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"binance"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Binance"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "nginx",
"content-type": "text/html",
"strict-transport-security": "max-age=31536000"
} |
Observé: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 53,
"malicious": 0,
"suspicious": 0,
"undetected": 39
} |
|---|---|
| Reputation | 0 |
| First seen | 2026-10-21T06:30:21Z |
| DNS records | [
{
"ttl": 600,
"type": "A",
"value": "168.222.65.180"
},
{
"ttl": 3600,
"type": "NS",
"value": "ns1.myhostadmin.net"
},
{
"ttl": 500,
"type": "SOA",
"rname": "dnsconct.myhostadmin.net",
"value": "ns1.myhostadmin.net"
},
{
"ttl": 3600,
"type": "NS",
"value": "ns2.myhostadmin.net"
}
] |
| Dns at | 2026-10-21T06:30:21Z |
| Jarm | 3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763 |
| Certificate | {
"san": [
"apk-binance.com.cn"
],
"issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
"serial": "79682afe4455bbbca5525bd9e525d6589d6b5169",
"sha256": "50976bb45d5b8e50ce0571dcee9f5320a5af0cb8f3d1e5583a8bc61dfdab9542",
"subject": "apk-binance.com.cn",
"valid_to": "2027-01-19T04:59:59Z",
"valid_from": "2026-10-21T05:00:00Z"
} |
| Registration record | {
"status": [
"ok"
],
"nameservers": [
"ns5.west.cn",
"ns6.west.cn"
],
"dnssec": "unsigned"
} |
| Mail configuration | {
"spf_lookups": 0
} |
|---|---|
| Caa records | {
"domain": "apk-binance.com.cn"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_count": 0
} |
| Page title and metadata | {
"ogUrl": "https://example.com/",
"title": "币安Binance官网入口|币安注册 币安交易所",
"author": "币安 Binance 中文指南",
"ogType": "website",
"robots": "index,follow,max-snippet:-1,max-image-preview:large",
"ogTitle": "币安Binance官网入口|币安注册与App下载教程",
"keywords": "币安,Binance,币安官网,币安注册,币安下载,币安App,币安交易所,币安开户",
"ogSiteName": "币安 Binance 中文指南",
"themeColor": "#0B0E11",
"description": "币安Binance是全球领先的数字资产交易平台。本页提供币安官网注册入口、币安App下载方式、手续费说明与安全设置指南,帮助你快速完成币安开户并开始交易。",
"twitterCard": "summary",
"ogDescription": "币安Binance注册入口与App下载指引,包含手续费、安全设置与常见问题解答。"
} |
| Trackers | {
"requests": 0
} |
| Forms and mixed content | {
"third_party_scripts": 0
} |
| Statut | {
"up": true,
"code": 200,
"timings": {
"dns": 1204,
"tls": 199,
"wait": 386,
"connect": 193,
"download": 0
},
"response_ms": 1982
} |
| TLS connection | {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Carbon | {
"bytes": 19666,
"co2_grams": 0.0007,
"cleaner_than": 57
} |
| Dns server | {
"ns": [
{
"ip": "211.149.230.100",
"host": "ns2.myhostadmin.net"
},
{
"ip": "60.247.150.254",
"host": "ns1.myhostadmin.net"
}
],
"zone": "apk-binance.com.cn"
} |
| Location | {
"ip": "168.222.65.180",
"asn": "153656",
"org": "OWGELS INTERNATIONAL CO., LIMITED",
"city": "Tsuen Wan",
"country": "HK"
} |
| Ssl | {
"issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
"subject": "apk-binance.com.cn"
} |
| DNS records | {
"A": [
"168.222.65.180"
],
"NS": [
"ns1.myhostadmin.net",
"ns2.myhostadmin.net"
],
"SOA": "{\"nsname\": \"ns1.myhostadmin.net\", \"hostmaster\": \"dnsconct.myhostadmin.net\", \"serial\": 2026102203, \"refresh\": 43200, \"retry\": 300, \"expire\": 1209600, \"minttl\": 3600}"
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"header": "max-age=31536000",
"message": "HSTS header does not include all subdomains."
} |
| HTTP security policies | {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": "max-age=31536000",
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Get ip | {
"ip": "168.222.65.180",
"family": 4
} |
| Redirects | {
"chain": [
"https://apk-binance.com.cn"
]
} |
| Sous-domaines | {
"count": 1,
"subdomains": [
"cn.apk-binance.com.cn"
]
} |
| Tech stack | {
"technologies": [
"Nginx",
"HSTS",
"Open Graph"
]
} |
| Page links | {
"external": [
"https://download.bsmkweb.cc/pack/BNApp_F0002073.apk",
"https://www.bsmkweb.cc/zh-CN/join"
],
"external_count": 2,
"internal_count": 4
} |
| Registration record | {
"registrar": "北京新网数码信息技术有限公司",
"created": "2026-10-21T12:07:20Z",
"expires": "2027-10-21T12:07:20Z",
"status": [
"ok"
],
"nameservers": [
"ns5.west.cn",
"ns6.west.cn"
]
} |
| HTTP headers | {
"headers": {
"server": "nginx",
"content-type": "text/html",
"strict-transport-security": "max-age=31536000"
}
} |
Last checked
ns1.myhostadmin.netns2.myhostadmin.netns5.west.cnns6.west.cnLocation describes the IP network.
50976bb45d5b8e50ce0571dcee9f5320a5af0cb8f3d1e5583a8bc61dfdab9542apk-binance.com.cnSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.
cn.apk-binance.com.cnDomain recordThe original observation time is not recorded for these hostnames.
Google PageSpeed Insights — mobile performance audit of apk-binance.com.cn · checked Oct 21, 2026
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Accessible
No threat flag
View source0/92 engine detections
View sourceapk-binance.com.cn
View sourcePage captured
View source187 domaines ressemblants enregistrés
100 affichés sur 187
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
apk-binance.com.cn
Listed domains receive at least one abuse report; this entry has no retained notification history.
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
apk-binance.com.cn)Même si vous ne disposez pas de tous les détails — déposer quand même une plainte. Même des informations partielles peuvent aider les enquêtes.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerRapports de phishing récents et changements de disponibilité observés
SurveillerSurveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.