Security Scan Report: portals-coinbase-pro.daftpage.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is daftpage.com and was registered 5 years ago.

Submitted URL: https://portals-coinbase-pro.daftpage.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Paused daftpage.com subdomain named after Coinbase, flagged for phishing by one feed. No forms live now, but the deceptive hostname and phishing report indicate a taken-down Coinbase-branded phishing page. Avoid.

Risk Factors (4)
Brand impersonation of Coinbase in the subdomain name on a third-party site-builder host
Single-source phishing threat-intel match on the primary domain
Empty paused deployment with no legitimate content or contact information
Unranked domain while presenting another entity's brand name
Domain age information unavailable

Details

Page Title

Deployment Paused

Scan Type

public

Domain Name Analysis

Domain 'portals-coinbase-pro.daftpage.com' uses the commercial generic top-level domain (.com), featuring subdomain 'portals-coinbase-pro'. Its registrable label 'daftpage' stretches across 8 characters split between 3 vowels and five consonants. Word splitting yields 2 words: daft, page. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://portals-coinbase-pro.daftpage.com/

Page Load Overview

0.20s
Total Load Time
2 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:94 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service65% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
65%
cryptocurrency blockchain
61%
news media journalism
59%
healthcare medical
56%
real estate property
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.198.79.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
064.29.17.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0216.198.79.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EA31747755B1602EF23B8CFE34E673682244952BC0960F5AB618ABF4E2D7CA75023645

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:n01AUJXgZH+6n9zS3rJGm9q8hDH48OFFxnrFA+Dclgz9Dln38yRL48Ap74k02Ota:nGoZ9S3dGNGDY7nnrm+AgJJ8E0X7B5O0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1638:oACAAkAAAAEAICWAAIAADAABAACAAAcABAAAQAAAAAAAAAAAAAAAAQCAAERAEACAAAAAQAAACEADAAQgAAUAAEACAAgAMQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffe7
Perceptual Hash:e699cc9966998999
Difference Hash:0000000c0c00000c
Wavelet Hash:30303c24e4fcf8e0
Color Hash:#40a4bf

Other Hashes

Crop Resistant:0000000c0c00000c

Scan History

Scan history not available

Unable to load historical scan data