Security Scan Report: 1479182-coinbase.com

Redirected to:
https://haveibeenpwned.com//
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 4 domains to perform 102 HTTP transactions. The main domain is 1479182-coinbase.com and was registered 4 months ago.

Submitted URL: https://1479182-coinbase.com

Effective URL:
https://haveibeenpwned.com//
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Final page is the genuine Have I Been Pwned breach-check site with only an email lookup form, but the entry domain 1479182-coinbase.com carries a single-source phishing report, so treat the redirect path with caution.

Risk Factors (2)
The host that was entered, 1479182-coinbase.com, is reported as a phishing domain by a single unverified community feed — a Coinbase-lookalike naming pattern even though the final destination is legitimate.
Serving path depends on an unexplained cross-domain redirect from a phishing-flagged host to a security service, which warrants caution about how that entry domain is being used or has been abused.
Domain age information unavailable

Details

Page Title

Have I Been Pwned: Check if your email address has been exposed in a data breach

Scan Type

public

Domain Name Analysis

Domain '1479182-coinbase.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label '1479182-coinbase' is 16 characters long split between 4 vowels and 4 consonants, along with 7 digits and 1 hyphen. Word splitting yields three words: 1479182, coin, base. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

1--Pyyned Who's Been Pwned Passwords NotifyMe API Demos Pricing About ~ Dashboard Have | Bee 1-- PY/NEK Check if your email address is in a data breach Using Have | Been Pwned is subject to the ter...

Page Load Overview

1.43s
Total Load Time
33.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,670 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17104.16.124.33Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17162.159.140.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17104.16.123.33Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1026--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CCC2723160F4103B42A3A2D2B661BA1AE9D2E54BCA6B564172FD97CC1FD3EC3CE13159

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:AhiesCRICITzq3V/Q9x+qBH3TmqiisoF5liya5FQwkkvRF0/LOrZKeCZ4f++4zv1:xe6rsY5liyYzZsZ4WXL2SY6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28204:O2DxQEKYBACAAAEBHVhJHoLwSxmgECAoIBElAgZTFQkGCLAAQiEgLmOQFhkrDAaBCKSbRVVxIDfJg6qEMAmAAAESAlgxixwA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018183c383c7c38
Perceptual Hash:cc2c7333cdd13361
Difference Hash:d531f1f1f1e8f0f0
Wavelet Hash:20383c3c3c7e7e3c
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data