Security Scan Report: disnakertransulut.com

Redirected to:
https://591cashsecure-withdrawal-confirm3d.crabdance.com/signin?c_ds_n...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 4 domains to perform 18 HTTP transactions. The main domain is disnakertransulut.com and was registered 4 months ago.

Submitted URL: https://disnakertransulut.com/?crcrjiwtwt9xe8q1v03x0b6ovvjmoc5z

Effective URL:
https://591cashsecure-withdrawal-confirm3d.crabdance.com/signin?c_ds_n...
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Coinbase-branded sign-in page on a crabdance.com dynamic-DNS host, reached by cross-domain redirect from an unrelated old domain; brand impersonation and suspicious network signals.

Risk Factors (5)
Coinbase brand presented on a non-Coinbase dynamic DNS domain.
Cross-domain redirect from an unrelated entry domain to a brand sign-in clone.
High-severity IDS dynamic DNS alerts associated with *.crabdance.com.
Suspicious hostname crafted to resemble a withdrawal confirmation flow.
Email collection on a brand login page hosted outside the brand's official domain.
Domain age information unavailable

Details

Page Title

Coinbase - Sign In

Scan Type

public

Domain Name Analysis

The domain 'disnakertransulut.com' uses the commercial generic top-level domain (.com). The registrable portion 'disnakertransulut' spans 17 characters with 6 vowels and eleven consonants. Splitting it apart reveals 6 words: di, snake, r, trans, ul, ut. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Signup _Sign into Business Sign in to Coinbase Email Your email address | oR Sign in with Passkey a Sign in with Google G Sign in with Apple « Sign in with Wallet Not your device? Use a private...

Page Load Overview

4.63s
Total Load Time
499 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,027 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain39% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
39%
technology software
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3195.88.211.212Jakarta, Jakarta, Indonesia
AS214882PT Data Kencang Hutama
3172.66.1.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3201.79.38.24Kansas City, Missouri, United States
AS14061DigitalOcean, LLC
318.173.205.30Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3162.159.141.170Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
318.173.205.70Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
186--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CF23D6AA92B324353407C6F056B4569A7740C0139F19CDE4BBDD16A0AF8BDE8C8F79E4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:x6i/zpz+FBlgGRev9sedeIQ5noe40QJHZgWkjwYAJOja1ez4r18EFrxe5MLJq:x6i1zOwcemedW+e40fW8qi+l3e5MFq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47978:ACARFmAIAHRAIARBUIngIgYBd4BFAZErAFAMwcYGMQEBBPEKTUZAxCc+qAFOsJDASVwFwgMK2gBAQghYUYLogUgIguYS0BEM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feefe7e7e7e7ff00
Perceptual Hash:f3b24c9848d66676
Difference Hash:88084d0c0c0c0016
Wavelet Hash:64e7e4e4e4e4e600
Color Hash:N/A

Other Hashes

Crop Resistant:88084d0c0c0c0016

Scan History

Scan history not available

Unable to load historical scan data