Phishing detection: srv6-coinbase.com

Coinbase
https://srv6-coinbase.com Access site
Screenshot
Screenshot of srv6-coinbase.com

Screenshot captured by urlscan.io on 2026-10-11T23:42 UTC: our own render of this page came back blank.

Phishunt analysis Beta
31 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.1 Brand in screenshot
  • +3.4 Shared IP cluster
  • +3.2 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.7 Unrecognised DNS provider
  • +0.6 Registrar reputation
  • +0.3 Long domain
  • +0.2 Suspicious TLD
  • +0.1 Hyphens
17 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Coinbase on a lookalike domain registered through NameSilo and hosted on Akamai Connected Cloud in the US. The page shows Coinbase branding in its screenshot text and is flagged by Google Safe Browsing for social engineering, consistent with crypto account credential harvesting.

Google Safe BrowsingBrand in screenshotKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-12 · confidence 80%
Domain & Network
Whois
Registrar NameSilo, LLC
Network
IP 172.237.129.242 Akamai Linode
Country United StatesUnited States
ASN AS63949
TLS Cert -
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Akamai Connected Cloud
Registrar NameSilo, LLC
Brand owner Coinbase

Tracked from 2026-10-12 05:24 UTC  ·  Last refreshed 2026-10-19 17:30 UTC