ScanMalware.com

Security Scan Report: auth-sso-coinbasepro--sso.webflow.io

Submitted: Oct 27, 2025, 8:16:14 AMCompleted: Oct 27, 2025, 8:18:52 AMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 1 country across 3 domains to perform 6 HTTP transactions. The main domain is auth-sso-coinbasepro--sso.webflow.io.

Submitted URL: https://auth-sso-coinbasepro--sso.webflow.io/

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Phishing page impersonating Coinbase Pro on a newly created, unranked Webflow domain.

Risk Factors
Brand impersonation of Coinbase Pro on an unrelated Webflow subdomain
Social engineering detection by Google Safe Browsing
UNRANKED domain with likely very recent registration
Domain age information unavailable

Details

Page Title

Official Website® of |Coinbase Pro: | Digital Asset Exchange®

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

legitimate website

(78%)

Domain Information

You're looking at domain 'auth-sso-coinbasepro--sso.webflow.io' on the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'auth-sso-coinbasepro--sso'. Its registrable label 'webflow' stretches across 7 characters containing two vowels alongside 5 consonants. Splitting it apart reveals 2 words: web, flow. Median word length is 3.5 characters. The linguistic tilt is Chinese (Pinyin) for 'web'. You may catch it in English and Vietnamese as well. Taken together, it feels Chinese (Pinyin).

Screenshot

Security scan screenshot of https://auth-sso-coinbasepro--sso.webflow.io/

Page Load Overview

0.42s
Total Load Time
6
HTTP Requests
3
Domains
714 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:451 chars
Detector Agreement:100%

Website Classification

Primary Category

legitimate website78% confidence
Type: static
Method: ml+structural

All Detected Categories

legitimate website
78%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6104.18.36.248United States
AS13335CLOUDFLARENET
4104.18.160.117United States
AS13335CLOUDFLARENET
113.226.247.220United States
AS16509AMAZON-02
1172.64.151.8United States
AS13335CLOUDFLARENET
0104.18.161.117United States
AS13335CLOUDFLARENET
013.226.247.67United States
AS16509AMAZON-02
02606:4700:440c::ac40:9708United States
AS13335CLOUDFLARENET
013.226.247.129United States
AS16509AMAZON-02
02a06:98c1:3100::6812:24f8United States
AS13335CLOUDFLARENET
02606:4700::6812:a075United States
AS13335CLOUDFLARENET
612--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B451646B9898A85A47361FD0F5B1F08ECE8643DDE5F8C801818ED59EB2DCFD6D06604A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:LXgJYcPGvLgnC4iGba2o+F+uhUz/hFvH1WFpUSILIzT8:LXgPGvLTw/hUz/TvH1OpV2kT8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2604:AAAFABAAGgAQEAAIBACAACACBAgAAAIAAAQAEACgAEASAAAAAAECIAAAQAgQAAigIUIDHAAgAAAACAAAQDAAACEAAAAAACEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffbd198100404040
Perceptual Hash:889dba6627ba89d8
Difference Hash:2b31b32387959595
Wavelet Hash:ffffdb8901414141
Color Hash:#cee06c

Other Hashes

Crop Resistant:2b31b32387959595

Scan History

Scan history not available

Unable to load historical scan data