Security Scan Report: help-coinbaswalext.gitbook.io

Submitted: Dec 13, 2025, 10:28:02 PMCompleted: Dec 13, 2025, 10:28:35 PMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 1 country across 4 domains to perform 47 HTTP transactions. The main domain is help-coinbaswalext.gitbook.io and was registered NaN years ago.

Submitted URL: https://help-coinbaswalext.gitbook.io/us/

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Site mimics Coinbase on an unranked GitBook subdomain; likely a phishing page.

Risk Factors
Brand impersonation/typosquatting on an unusual domain
Unranked domain presenting a well‑known brand
Use of a GitBook subdomain that does not belong to the official brand
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Coinbase® Extension® | Getting Started:- | Wallet Extension**

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(42%)

Domain Information

You're looking at domain 'help-coinbaswalext.gitbook.io' on the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'help-coinbaswalext'. Count 7 characters in 'gitbook' containing 3 vowels alongside four consonants. Tokenizing the label suggests 3 words: g, it, book. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://help-coinbaswalext.gitbook.io/us/

Page Load Overview

8.56s
Total Load Time
47
HTTP Requests
4
Domains
152 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:425 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software42% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
42%
cryptocurrency blockchain
31%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14172.64.147.209United States
AS13335CLOUDFLARENET
3172.64.147.188United States
AS13335CLOUDFLARENET
3104.18.41.89United States
AS13335CLOUDFLARENET
3104.18.40.47United States
AS13335CLOUDFLARENET
3172.64.146.167United States
AS13335CLOUDFLARENET
3104.18.40.68United States
AS13335CLOUDFLARENET
32606:4700:4402::ac40:93d1United States
AS13335CLOUDFLARENET
32a06:98c1:3101::ac40:93bcUnited States
AS13335CLOUDFLARENET
32606:4700:4407::6812:282fUnited States
AS13335CLOUDFLARENET
32606:4700:4404::6812:2959United States
AS13335CLOUDFLARENET
4712--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14CC3F91A2000F6056EB2DE15633A7D3AC09ED627DBB4D4ADF30DD8E6178853F07A7A90

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:sf3qLAyhvvt/dv2vJDXBh+q3nRvIOuP1lJcEBsUFejFwSGkPCcljjRTmJUUOwqjU:k3grB53xzLiX0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:124698:BkaVsRAgCAsAyTKsIECaDQpTQQlkGgADHjFcVFZEFkQDJbpSi0MAAsQprazRTQENL1BQqRKhYQyEamMxcJAAAJRgSECINBsU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efc7ffe3e3e3ffff
Perceptual Hash:e619996666998b66
Difference Hash:591e0a0405050044
Wavelet Hash:0003e7c3c3c3cf3f
Color Hash:#409bbf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data