ScanMalware.com

Security Scan Report: migrate.coinbase-airdrop.exchange

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/30002d7d-cc2c-4c2d-b774-b9ecc47cd508Domain and IP registration (RDAP)/api/v1/rdap/30002d7d-cc2c-4c2d-b774-b9ecc47cd508How often this domain was scanned/api/v1/domain/stats/migrate.coinbase-airdrop.exchangeScan history for this domain/api/v1/domain/history/migrate.coinbase-airdrop.exchange?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is coinbase-airdrop.exchange and was registered 1 week ago.

Submitted URL: https://migrate.coinbase-airdrop.exchange

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Coinbase-branded wallet-drainer phishing on a one-day-old lookalike domain, flagged by Safe Browsing for social engineering. Never connect a wallet.

Risk Factors (5)
Safe Browsing social engineering / phishing detection (2 instances)
Impersonation of Coinbase on a lookalike third-party domain
Domain ≤1 day old and absent from all reputation rankings
Crypto wallet connection solicitation framed as an urgent token migration
Deceptive subdomain construction (coinbase-airdrop.exchange) designed to appear official
Domain age information unavailable

Details

Page Title

Coinbase — Token Migration

Scan Type

public

Domain Name Analysis

You're looking at domain 'migrate.coinbase-airdrop.exchange' on the .exchange top-level domain with subdomain 'migrate'. The second-level label 'coinbase-airdrop' is 16 characters long holding 7 vowels versus 8 consonants, along with 1 hyphen. It segments into three words: coin, base, airdrop. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

(o} Coinbase Migrate your tokens We're upgrading our token contract. Migrate your tokens to the new contract to continue earning rewards. (:) Connect your wallet e Approve the migration e Receive...

Page Load Overview

0.26s
Total Load Time
2 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:258 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain83% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
83%
finance banking
33%
technology software
29%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.21.29.100Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.67.148.191Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12--

Detected Technologies4

HTTP/3
40%
HSTS
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1024143365215750A734B49C43927EBFB7259CD0BE34662350EE185ECC1CCAC29A73398

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:n66WKkjFJaBdSm8eh1ZqdhsNEg6UEp6bBf:nzkxJaS3eh12gepgBf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2259:AAQCAIABACAMAAJAAEAAAAAEMAAAICIAATAAAggAMAYAIAkIEAAQAAQBBAQIAAEAAIABCAAAgAAABAAAQwAAEAAEAAKAgAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7efc7e7ffffffff
Perceptual Hash:b33399cc66663299
Difference Hash:1c184c4d000c0000
Wavelet Hash:27272727f0f0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:1c184c4d000c0000

Scan History

Scan history not available

Unable to load historical scan data