Phishing detection: coinbase.com.lc

Coinbase
https://coinbase.com.lc Access site
Screenshot
Screenshot of coinbase.com.lc

Screenshot captured by urlscan.io on 2026-09-10T07:01 UTC: our own render of this page came back blank.

Investigate
Domain coinbase.com.lc36 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 172.239.193.153
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://coinbase.com.lc
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
31 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.1 Brand in screenshot
  • +2.9 ASN reputation
  • +2.0 Young domain
  • +1.3 Brand typo
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.7 Unrecognised DNS provider
  • +0.6 Suspicious TLD
  • +0.3 Long domain
  • +0.1 Deep subdomain
15 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Coinbase under coinbase.com.lc, abusing a country-code TLD to embed the brand as a second-level domain. Flagged by Google Safe Browsing as social engineering and belonging to a known cluster of similar phishing infrastructure targeting cryptocurrency account holders.

Google Safe BrowsingSite clusterNo brand links
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-10 · confidence 80%
Domain & Network
Whois
Network
IP 172.239.193.153
Country United StatesUnited States
Hosting Akamai Connected Cloud
ASN AS63949
TLS Cert -
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Akamai Connected Cloud
abuse@linode.com
Brand owner Coinbase
Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-09-10 05:25 UTC  ·  Last refreshed 2026-09-12 21:30 UTC