Phishing detection: coinbase-com-wallet.vercel.app
Coinbase Screenshot
Investigate
Domain
coinbase-com-wallet.vercel.app0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
216.198.79.3
ipinfo
Greynoise
URL
https://coinbase-com-wallet.vercel.app
Phishunt analysis Beta
51
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +5.1 urlscan.io
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.9 Password field
- +3.7 Brand in domain label
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +1.6 Young domain
- +1.1 ASN reputation
- +1.1 No CSP header
- +0.8 Brand + login token
- +0.6 Long domain
- +0.6 Login text in screenshot
- +0.6 Suspicious TLD
- +0.2 Hyphens
- +0.1 External scripts
- +0.1 Deep subdomain
24 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site combosquats on Coinbase to impersonate its cryptocurrency wallet service, hosted on Vercel free infrastructure. Confirmed as malicious by Google Safe Browsing, OpenPhish, and URLScan, likely targeting wallet credentials or seed phrases.
Brand + login tokenOpenPhishPaaS host
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-27 · confidence 90%
Domain & Network
Whois
Registrar
Tucows Domains Inc
Network
IP
216.198.79.3
Country
United States
United States
Hosting
Amazon.com, Inc.
ASN
AS16509
TLS Cert
-
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Network / ASN
Amazon.com, Inc.
Brand owner
Coinbase
Submit to blocklists