ScanMalware.com

Security Scan Report: www.cointracker.io

Submitted: Nov 21, 2025, 7:44:23 AMCompleted: Nov 21, 2025, 7:46:54 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d8a15dad-065a-456e-b679-e1d1b2f8775dDomain and IP registration (RDAP)/api/v1/rdap/d8a15dad-065a-456e-b679-e1d1b2f8775dCertificate Transparency/api/v1/ct/cointracker.ioHow often this domain was scanned/api/v1/domain/stats/cointracker.ioScan history for this domain/api/v1/domain/history/cointracker.io?limit=15

This website contacted 9 IPs in 1 country across 6 domains to perform 69 HTTP transactions. The main domain is cointracker.io and was registered 12 years ago.

Submitted URL: https://www.cointracker.io/learn/metamask

The Cisco Umbrella rank of the primary domain is #626,387 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Site impersonates MetaMask on a low‑ranked domain; likely phishing.

Risk Factors (2)
Brand impersonation of MetaMask on a non‑official, low‑ranked domain
Low Cisco Umbrella ranking for a site claiming a well‑known brand
Domain age information unavailable

Details

Page Title

What is MetaMask? How It works and why it's essential in crypto | CoinTracker

Scan Type

public

Domain Name Analysis

The domain name 'www.cointracker.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with subdomain 'www'. The core label 'cointracker' covers 11 characters holding four vowels versus seven consonants. Splitting it apart reveals two words: coin, tracker. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.cointracker.io/learn/metamask

Page Load Overview

0.72s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:143 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain73% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
73%
technology software
72%
documentation technical
60%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
64104.18.25.47United States
AS13335CLOUDFLARENET
13104.18.24.47United States
AS13335CLOUDFLARENET
7104.18.11.139United States
AS13335CLOUDFLARENET
72606:4700::6812:b8bUnited States
AS13335CLOUDFLARENET
72606:4700::6812:192fUnited States
AS13335CLOUDFLARENET
72606:4700::6812:182fUnited States
AS13335CLOUDFLARENET
72606:4700::6812:a8bUnited States
AS13335CLOUDFLARENET
3104.18.10.139United States
AS13335CLOUDFLARENET
234.120.195.249Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
699--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T199824B374A46201F73374E9B6164BB648120F384D30293AEF5B79E5897C9A1F57A23EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Va+I9yIPl2boVmJkEqJBFxApaVytACn9EGZ+69xyAYXb:U+Icq4brJkxFxenzMSfYL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18354:EhjQUSBkRwIEUEeIaSF7HiYUjAKGQEAVERKealVSEGEgUTPswCAQUAFCmBhIA4FJF2GaBAFTcCQwoKFBaI4ECKEGEuNCdnFI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c7c3ffffffe7
Perceptual Hash:b03883cfc6ccc6ce
Difference Hash:101c141e0000000c
Wavelet Hash:fcc0ccc0f0f0f8c0
Color Hash:#99c587

Other Hashes

Crop Resistant:101c141e0000000c

Scan History

Scan history not available

Unable to load historical scan data