Security Scan Report: moz-extension-getstarted-coinbase-extension.pages.dev

Site favicon
Submitted: Jul 5, 2026, 12:45:13 PMCompleted: Jul 5, 2026, 12:46:57 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Page impersonates Coinbase and solicits private keys, flagged by Safe Browsing; treat as confirmed credential phishing scam.

Risk Factors (4)
Brand impersonation of a major cryptocurrency service
Credential harvesting prompt without legitimate form
Unranked subdomain on pages.dev with unknown age
Safe Browsing social engineering warning
Domain age information unavailable

Details

Page Title

Coinbase Wallet - Your key to the world of crypto

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'moz-extension-getstarted-coinbase-extension.pages.dev' is registered, featuring subdomain 'moz-extension-getstarted-coinbase-extension'. Count 5 characters in 'pages' with 2 vowels and three consonants. It segments into 1 word: pages. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://moz-extension-getstarted-coinbase-extension.pages.dev/key

Page Load Overview

32.89s
Total Load Time
869 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Text Length:354 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain89% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
89%
technology software
30%
cryptocurrency
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
54188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
541--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AAA33321E3329130639F4A7EF491AF1E73ADB2039700B8A5792F18D11F4F569A1D7E26

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:mLAXQ61LAXQ67LAXQ6fLAXQ6y8Ba78xqo:mLAXQ61LAXQ67LAXQ6fLAXQ6y8Ba78xP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:103791:aBEbLLHIZs8IQSChUNQACE88wCSFhUDBDHgQGgCDvBCaA2OEbkC4gUJoJpRmACC0DTqcB2QTANAmPkhgkUkSEaBC4oKgCRFe

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181800181800
Perceptual Hash:cc66339933cccc66
Difference Hash:002032320c32320c
Wavelet Hash:0018383818181800
Color Hash:#783a74

Other Hashes

Crop Resistant:002032320c32320c

Scan History

Scan history not available

Unable to load historical scan data