Phishing detection: coinbasebackoffice.exchange

Coinbase
http://coinbasebackoffice.exchange Access site
Screenshot
Screenshot of coinbasebackoffice.exchange
Investigate
Domain coinbasebackoffice.exchange0 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 2.57.91.91
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://coinbasebackoffice.exchange
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
26 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +3.7 Brand in domain label
  • +3.2 Young domain
  • +3.0 TweetFeed
  • +2.4 ASN reputation
  • +2.2 Country mismatch
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +1.0 Site cluster
  • +0.9 No registrar lock
  • +0.7 Unrecognised DNS provider
  • +0.6 Long domain
  • +0.6 Suspicious TLD
  • +0.2 Obfuscated JavaScript
  • +0.1 External scripts
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Coinbase under a domain suggesting an administrative back-office portal, likely targeting crypto account credentials. Hosted in Cyprus via Hostinger on a newly registered minimal-status domain flagged by threat intelligence.

Brand in domain labelKeyword matchTweetFeed
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-28 · confidence 70%
Domain & Network
Whois
Registrar HOSTINGER operations, UAB
Network
IP 2.57.91.91
Country CyprusCyprus
Hosting Hostinger International Limited
ASN AS47583
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Report this phishing
Network / ASN Hostinger International Limited
abuse@hostinger.com
Brand owner Coinbase
Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-28 18:07 UTC  ·  Last refreshed 2026-09-09 15:30 UTC