Security Scan: Loading

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bd231d0f-d2db-44eb-a586-f0addd7d4057 Domain and IP registration (RDAP)/api/v1/rdap/bd231d0f-d2db-44eb-a586-f0addd7d4057How often this domain was scanned/api/v1/domain/stats/128738-coinbase.com Scan history for this domain/api/v1/domain/history/128738-coinbase.com?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 21 HTTP transactions. The main domain is 128738-coinbase.com and was registered 2 months ago.

Submitted URL: https://128738-coinbase.com

Effective URL:

https://128738-coinbase.com/?fp=1793711683680.bee58b7f65cfc0e5ca9e5a62...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Coinbase-lookalike domain (59 days old, unranked) that Google Safe Browsing flags for social engineering; serves a cloaking browser-check page. Do not enter credentials or connect a wallet.

Risk Factors (4)

Google Safe Browsing Social Engineering / phishing detection

Impersonation of the Coinbase brand on a non-official, numeric-prefixed lookalike domain

New (59-day-old) and unranked domain fronting a major financial brand

Opaque browser-check interstitial that hides the actual page from inspection

Domain age information unavailable

Details

Page Title

Just a moment…other network

Scan Type

public

Domain Name Analysis

You're looking at domain '128738-coinbase.com' on the commercial generic top-level domain (.com) with no subdomain. The core label '128738-coinbase' covers 15 characters holding 4 vowels versus 4 consonants; it also includes six digits and 1 hyphen. Breaking it apart gives three words: 128738, coin, base. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

An error occurred on that page. Please try again later.

Page Load Overview

0.31s

Total Load Time

9 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:71 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical40% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

40%

technology software

34%

news media journalism

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	172.67.204.65Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	104.21.85.95Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
21	2	-	-

Detected Technologies5

Node.js

50%

HTTP/3

40%

Express

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DC61639B50760476107344AB219352483023940B7C0BF894FF4D26256FCAE4BB2777DE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:0y7wzcdBPluRuBlJ9oLrUuPP34c//wFmpfYq0aTP24MDX2Wfcqd0in:D7qMN3ULrUy34cg0D0CNy5f/dp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3179:gAFBggIIQCAAAEAWAQAIgEUARAEgQiEgIgAABBAAAAAAAAUAAChgAACAQABRQAAACGQgQEAILABDAIQNEIBAAACAKAIAEIKJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 128738-coinbase.com