ScanMalware.com

Security Scan Report: coinbasepayments.net

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/79cb839e-107c-4484-aa9a-4ec3b38c86bdDomain and IP registration (RDAP)/api/v1/rdap/79cb839e-107c-4484-aa9a-4ec3b38c86bdHow often this domain was scanned/api/v1/domain/stats/coinbasepayments.netScan history for this domain/api/v1/domain/history/coinbasepayments.net?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is coinbasepayments.net and was registered 8 years ago.

Submitted URL: http://coinbasepayments.net

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Old, unranked parked domain with a brand-adjacent name. It serves only a MarkMonitor protection notice, with no forms, scripts, or threat-intel hits, so no active impersonation or phishing was observed.

Risk Factors (3)
Domain name contains a well-known brand token ('coinbase') while not being the brand's official domain — potential brand-adjacent/typosquatting positioning
Circular redirect detected in the redirect chain
No verifiable business content, only a registrar parking/protection notice
Safety Factors (4)
Established 8-year-old registration
No credential, login, or payment forms present (0 forms, 0 password fields)
No threat-intelligence matches, no JavaScript malware patterns, no network IDS alerts
No cross-origin credential exfiltration
Domain age information unavailable

Details

Page Title

Registered & Protected by MarkMonitor

Scan Type

public

Domain Name Analysis

Domain 'coinbasepayments.net' uses the network infrastructure generic top-level domain (.net). Its registrable label 'coinbasepayments' stretches across 16 characters containing six vowels alongside 10 consonants. Tokenizing the label suggests 3 words: coin, base, payments. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

ZA Markmonitor’ This domain is registered and protected by Markmonitor More than half the Fortune 100 trust Markmonitor to protect their brands online. 157026 Martanontar ine Alvis feserved,

Page Load Overview

4.38s
Total Load Time
42 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Text Length:218 chars
Detector Agreement:100%

Website Classification

Primary Category

legitimate website44% confidence
Type: static
Method: ml+structural

All Detected Categories

legitimate website
44%
e-commerce
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
599.83.176.46Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
51--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13A31751FB202051B718EF8A178559F95A74BC58373AE5F91F8C0E0B8D0C60D88A71398

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:lmIThz41F4D5LM3vMQGqsRB8ituGdg1QHTNMcihW52zE:1tU1eG/TIZnaO2zE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1587:gEAAAEAAEAAACAABEAAHAAAAAAgEAEUAGRABIkAAAAAgAAgBAEBAQABQAAAEAAAAJAAAAAAgAgCAAACAAAAAAAEAAgAADwAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ffffffffff
Perceptual Hash:b333339999998966
Difference Hash:2a4d4c3008000000
Wavelet Hash:07070f0f0f0f0f0f
Color Hash:N/A

Other Hashes

Crop Resistant:2a4d4c3008000000

Scan History

Scan history not available

Unable to load historical scan data