Phishing detection: appeal-coinbase.com
Coinbase Screenshot
Investigate
Domain
appeal-coinbase.com1 CT host on apex
urlscan
VirusTotal
Whois
IP
2.58.56.150
ipinfo
Greynoise
URL
https://appeal-coinbase.com
Phishunt analysis Beta
21
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +3.4 Shared IP cluster
- +3.2 Young domain
- +2.2 Country mismatch
- +2.0 Site cluster
- +1.1 No CSP header
- +0.9 No registrar lock
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Final host mismatch
- +0.5 Young certificate
- +0.4 Long domain
- +0.3 Free CA
- +0.2 Suspicious TLD
- +0.1 Hyphens
20 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
This site's domain name impersonates a Coinbase account-appeal page, but requests are ultimately redirected to an unrelated host, a pattern seen with phishing kits used to evade analysis. It shares hosting infrastructure with other flagged sites and lacks basic security headers.
Final host mismatchKeyword matchShared IP cluster
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-26 · confidence 35%
Domain & Network
Whois
Registrar
Dynadot Inc
Network
IP
2.58.56.150
Country
The Netherlands
The Netherlands
Hosting
1337 Services GmbH
ASN
AS210558
TLS Cert
YE1
External detection
No external source flags this
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed · urlscan.io
Campaign
Requests
Resources
Observables
Related websites
Report this phishing
Brand owner
Coinbase
Submit to blocklists