apac2.coinbase.com.lc

Coinbase

https://apac2.coinbase.com.lc Access site

Screenshot

Screenshot captured by urlscan.io on 2026-10-30T15:18 UTC: our own render of this page came back blank.

Investigate

Domain apac2.coinbase.com.lc38 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 34.195.60.139

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://apac2.coinbase.com.lc

urlscan

Wayback

archive.today

Cert YE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

32 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.1 Brand in screenshot
+2.6 ASN reputation
+1.7 Shared IP cluster
+1.3 Brand typo
+1.1 No CSP header
+1.1 No HSTS header
+0.9 Young certificate
+0.7 Brand in cert SAN
+0.7 Unrecognised DNS provider
+0.6 Suspicious TLD
+0.4 Long domain
+0.3 Free CA
+0.3 Deep subdomain

20 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

A Coinbase-branded host placed under the .lc country-code domain imitates the exchange's regional site. Brand text appears in the page, the certificate names the brand, and Google Safe Browsing flags it as social engineering. It is hosted on AWS and likely harvests credentials.

Google Safe BrowsingBrand in cert SANBrand in screenshot

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-29 · confidence 75%

Domain & Network

Whois

Network

IP 34.195.60.139 AWS EC2

Country