ScanMalware.com

Security Scan Report: api-coinbase.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c31f34b5-a5cb-4c38-a046-26a8df554040Domain and IP registration (RDAP)/api/v1/rdap/c31f34b5-a5cb-4c38-a046-26a8df554040How often this domain was scanned/api/v1/domain/stats/api-coinbase.comScan history for this domain/api/v1/domain/history/api-coinbase.com?limit=15
This website contacted 4 IPs in 1 country across 3 domains to perform 7 HTTP transactions. The main domain is api-coinbase.com and was registered 2 months ago.

Submitted URL: https://api-coinbase.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Coinbase-impersonating phishing page on a 61-day-old look-alike domain, using a fake emoji CAPTCHA and access-code prompt behind a Safe Browsing Social Engineering flag. Avoid; report.

Risk Factors (5)
Google Safe Browsing Social Engineering detection
Brand impersonation of Coinbase on a look-alike non-official domain
Anti-bot 'verification' gate designed to filter out scanners before serving the credential/access-code harvest
Newly registered (<90 days) domain with no reputation
Deceptive hostname using an 'api-' prefix to imply legitimacy
Domain age information unavailable

Details

Page Title

Security Verification

Scan Type

public

Domain Name Analysis

The domain name 'api-coinbase.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'api-coinbase' covers 12 characters split between six vowels and five consonants, along with one hyphen. Splitting it apart reveals three words: api, coin, base. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

coinbase Complete verification to continue Click the lion: BS K CA) 7] B we v Verify Answer ected by Coinbase

Page Load Overview

0.42s
Total Load Time
171 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:277 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical45% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
45%
government public service
33%
cryptocurrency blockchain
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
74--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T134C2B69731B3013A9C1361FB579B175632B4D087E50ADD2C3E8D03988F89ADD99B3798

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:LtiPH01PKeZyefsWqIyV5QhGxTxtr62Exf2mj2GaWl5jODiYHhOyoR7t/8JZPn9F:Bia2ssn2g4fAImwZ2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28123:SAFoJxEC9gFhyOBMAKQchmMbGhkQHjAwiKkwlMmxQk0CJAShAKlJIJhQghBcRoNgACAjoHvsFZAE8E6iBMkE0IiACABIOQ4D

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7f7dbcbdba5e7e7
Perceptual Hash:b399cc66998c3399
Difference Hash:062a322b234d0e06
Wavelet Hash:c3d399998981dbc3
Color Hash:N/A

Other Hashes

Crop Resistant:062a322b234d0e06

Scan History

Scan history not available

Unable to load historical scan data