Phishing detection: 978489-coinbase.com
Coinbase Screenshot
No screenshot available yet
Captured automatically on the next refresh cycle
Investigate
Domain
978489-coinbase.com0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
46.8.9.225
ipinfo
Greynoise
URL
https://978489-coinbase.com
Phishunt analysis Beta
20
low suspicionheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +2.2 Country mismatch
- +1.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +1.0 Site cluster
- +0.7 Unrecognised DNS provider
- +0.6 Final host mismatch
- +0.6 Registrar reputation
- +0.4 Long domain
- +0.2 Suspicious TLD
- +0.1 Hyphens
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Coinbase on a numeric-prefix domain hosted in Czechia. Flagged as social engineering by Google Safe Browsing; the site presents a same-origin form and references only an email address as contact, consistent with credential phishing against crypto users.
Google Safe BrowsingSame-origin formClone reference: email-only login
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-31 · confidence 71%
Domain & Network
Whois
Registrar
Ultahost, Inc.
Network
IP
46.8.9.225
Country
Czechia
Czechia
Hosting
Gransy s.r.o.
ASN
AS60592
TLS Cert
-
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io · SANS ISC
Requests
Resources
Observables
Related websites
Report this phishing
Brand owner
Coinbase
Submit to blocklists