Phishing detection: coinbasebackoffice.exchange

Coinbase
http://coinbasebackoffice.exchange Access site
Screenshot
Screenshot of coinbasebackoffice.exchange
Investigate
Domain coinbasebackoffice.exchange0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 2.57.91.91
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://coinbasebackoffice.exchange
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
22 low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelTweetFeed
16 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Coinbase under a domain suggesting an administrative back-office portal, likely targeting crypto account credentials. Hosted in Cyprus via Hostinger on a newly registered minimal-status domain flagged by threat intelligence.

Brand in domain labelKeyword matchTweetFeed
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-28 · confidence 70%
Domain & Network
Whois
Registrar HOSTINGER operations, UAB
Network
IP 2.57.91.91
Country CyprusCyprus
Hosting Hostinger International Limited
ASN AS47583
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Report this phishing
Network / ASN Hostinger International Limited
abuse@hostinger.com
Brand owner Coinbase
Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-28 18:07 UTC  ·  Last refreshed 2026-07-29 13:30 UTC