Phishing detection: coinbase.com.app-en.us

Coinbase
http://coinbase.com.app-en.us Access site
Screenshot
Screenshot of coinbase.com.app-en.us
Investigate
Domain coinbase.com.app-en.us1 CT host on apex
URL http://coinbase.com.app-en.us
Phishunt analysis Beta
40 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.5 ASN reputation
  • +3.0 OpenPhish
  • +2.6 Brand in subdomain
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.9 Young certificate
  • +0.7 Brand in cert SAN
  • +0.6 Login text in screenshot
  • +0.6 Suspicious TLD
  • +0.5 Long domain
  • +0.3 Deep subdomain
  • +0.1 Hyphens
20 signals fired · detector v3.0.0
AI analysis AIBeta
Crypto scam

Impersonates Coinbase by embedding the brand as a subdomain of a suspicious .us domain, confirmed malicious by Google Safe Browsing and OpenPhish. Hosted by RouterHosting LLC, a high-abuse-reputation ASN, likely targeting cryptocurrency exchange account credentials.

Google Safe BrowsingBrand in subdomainASN reputation
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-22 · confidence 90%
Domain & Network
Whois
Network
Country United StatesUnited States
ASN AS14956
TLS Cert YR2
External detection Google Safe Browsing OpenPhish
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed · urlscan.io
Report this phishing
Brand owner Coinbase

Tracked from 2026-08-22 13:02 UTC  ·  Last refreshed 2026-08-23 21:30 UTC