Security Scan Report: moz-extension-getstarted-coinbase-extension.pages.dev

Site favicon
Submitted: Jul 5, 2026, 12:45:19 AMCompleted: Jul 5, 2026, 12:49:03 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is moz-extension-getstarted-coinbase-extension.pages.dev and was registered NaN years ago.

Submitted URL: https://moz-extension-getstarted-coinbase-extension.pages.dev/select

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

The site impersonates Coinbase without collecting credentials, but its unknown subdomain age and lack of reputation raise moderate risk.

Risk Factors
Unranked / low‑reputation domain
Brand impersonation of Coinbase on unrelated subdomain
Unknown subdomain age (could be brand new)
Safety Factors
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Coinbase Wallet - Your key to the world of crypto

Scan Type

public

Language

🇺🇸

English

(60% confidence)

Category

cryptocurrency blockchain

(86%)

Domain Information

Domain 'moz-extension-getstarted-coinbase-extension.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'moz-extension-getstarted-coinbase-extension'. The second-level label 'pages' is 5 characters long with 2 vowels and 3 consonants. Tokenizing the label suggests one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://moz-extension-getstarted-coinbase-extension.pages.dev/select

Page Load Overview

75.24s
Total Load Time
58
HTTP Requests
1
Domains
256 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:60%
Script Type:Latin
Text Length:336 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain86% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
86%
finance banking
31%
cryptocurrency
30%
technology software
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
58188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
581--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18F732421E3318134A39F4A7EF490AF1E73ADB2039700B8A5792F18D11F4F569A1D7E26

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:JnTLAXQ6mmnTLAXQ6m0ZTLAXQ6MpCZD2m:JLAXQ61LAXQ63LAXQ66CZDv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:77203:oCSYdAGgAIx5s4mISREBwYKgVBUJCgNQYhqglQgBFiTUCEQDgg2hiAlAHlwACgFF9AIRSbIAYgBZsOkDFIhw9+cDERergsJB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818180000
Perceptual Hash:cccc33336666cccc
Difference Hash:0830323030300800
Wavelet Hash:00181c1c1f1f1f0f
Color Hash:#bbe06c

Other Hashes

Crop Resistant:0830323030300800

Scan History

Scan history not available

Unable to load historical scan data