autoconfig.190842-coinbase.com

Coinbase

https://autoconfig.190842-coinbase.com Access site

Screenshot

Investigate

Domain autoconfig.190842-coinbase.com10 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 104.21.5.12

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://autoconfig.190842-coinbase.com

urlscan

Wayback

archive.today

Cert WE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

29 low suspicionheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.1 Brand in screenshot
+1.9 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.8 Young domain
+0.7 Brand in cert SAN
+0.6 Long domain
+0.6 Login text in screenshot
+0.6 Registrar reputation
+0.3 Free CA
+0.2 Suspicious TLD
+0.1 Hyphens
+0.1 Deep subdomain

19 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Numeric-obfuscated Coinbase subdomain consistent with email-based phishing lures targeting Coinbase account credentials. Clone reference limited to email vectors suggests distribution via phishing messages. Hosted behind Cloudflare, flagged as social engineering by Google Safe Browsing.

Clone reference: email-only loginGoogle Safe BrowsingKeyword match

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-13 · confidence 75%

Domain & Network

Whois

Registrar OwnRegistrar, Inc.

Network

IP 104.21.5.12

Country