Security Scan: Coinbase Card

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1c6ab04a-7045-4f98-8b5e-d132d92759ee Domain and IP registration (RDAP)/api/v1/rdap/1c6ab04a-7045-4f98-8b5e-d132d92759eeHow often this domain was scanned/api/v1/domain/stats/rss2.sayler.at Scan history for this domain/api/v1/domain/history/rss2.sayler.at?limit=15

This website contacted 8 IPs in 3 countries across 5 domains to perform 13 HTTP transactions. The main domain is sayler.at and was registered 6 months ago.

Submitted URL: https://rss2.sayler.at/go/y2c4y254/z274x264/

Effective URL:

https://97zz1.casmex.at/cnbcard/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Coinbase-branded phishing page on an unranked, unrelated domain (97zz1.casmex.at) reached via a redirect chain from another phishing-flagged domain; it fakes a $39,437.16 card credit to lure users into clicking 'RECEIVE MONEY'. Not Coinbase — avoid and report.

Risk Factors (5)

Brand impersonation of Coinbase on an unrelated, unranked domain

Phishing threat-intelligence match on the primary domain of the scanned page

Phishing threat-intelligence match on the entry/redirect domain

Multi-hop cross-domain redirect chain used to reach the impersonation page

Fabricated account balance/credit notification used as a lure with a 'RECEIVE MONEY' call to action

Domain age information unavailable

Details

Page Title

Coinbase Card

Scan Type

public

Favicon Hash

MMH3: 956396876

MD5: 1ca82eec639a786fc6356337e0f7be77

Domain Name Analysis

The domain name 'rss2.sayler.at' uses the Austrian country-code top-level domain (.at) and includes subdomain 'rss2'. The registrable portion 'sayler' spans 6 characters holding two vowels versus four consonants. It segments into two words: say, ler. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.54s

Total Load Time

304 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:375 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain51% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

51%

finance banking

50%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	154.86.119.135	Amsterdam, North Holland, Netherlands	AS197574ExpressHost Ltd
1	2.26.124.139	Stockholm, Stockholm County, Sweden	AS198550Node Host Limited
1	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	13.33.187.16Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
1	172.67.68.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	13.33.187.25Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
13	8	-	-