Phishing sites impersonating Coinbase

PhishDestroy has recorded 4,630 phishing domains impersonating Coinbase since 2024-03-26, 63 of them in the last 30 days. The most used registrars are Cloudflare and NiceNIC; the most common TLDs are .com and .dev. The official Coinbase domain is coinbase.com: any other site asking for your login or wallet is not Coinbase.

4,630
Domains, all time
63
Last 30 days
1,563
Online at last check
1,165
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 12026-07-26: 22026-07-27: 142026-07-28: 52026-07-29: 22026-07-30: 72026-07-31: 52026-08-01: 72026-08-02: 12026-08-03: 72026-08-04: 22026-08-05: 12026-08-06: 22026-08-07: 02026-08-08: 12026-08-09: 32026-08-10: 22026-08-11: 52026-08-12: 92026-08-13: 82026-08-14: 22026-08-15: 22026-08-16: 02026-08-17: 52026-08-18: 42026-08-19: 12026-08-20: 92026-08-21: 122026-08-22: 32026-08-23: 12026-08-24: 42026-08-25: 02026-08-26: 152026-08-27: 02026-08-28: 12026-08-29: 02026-08-30: 02026-08-31: 62026-09-01: 332026-09-02: 132026-09-03: 212026-09-04: 212026-09-05: 02026-09-06: 72026-09-07: 72026-09-08: 22026-09-09: 12026-09-10: 02026-09-11: 92026-09-12: 02026-09-13: 42026-09-14: 22026-09-15: 32026-09-16: 02026-09-17: 112026-09-18: 02026-09-19: 22026-09-20: 22026-09-21: 22026-09-22: 42026-09-23: 02026-09-24: 02026-09-25: 12026-09-26: 12026-09-27: 02026-09-28: 02026-09-29: 32026-09-30: 02026-10-01: 22026-10-02: 02026-10-03: 22026-10-04: 22026-10-05: 02026-10-06: 12026-10-07: 82026-10-08: 02026-10-09: 42026-10-10: 02026-10-11: 82026-10-12: 02026-10-13: 102026-10-14: 02026-10-15: 72026-10-16: 12026-10-17: 12026-10-18: 02026-10-19: 32026-10-20: 52026-10-21: 02026-10-22: 0
Coinbase phishing domains detected per day: 352 from 2026-07-25 to 2026-10-22; peak 33.

How to tell a fake Coinbase site

Official domain: coinbase.com.

Words most often added to the brand in reported domains: coin, base, login, created, daftpage, extension, wallet, cdn, secure, help.

  • Type the address yourself or use a bookmark; phishing links for Coinbase arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Coinbase will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Coinbase phishing domains

The 50 most recently detected domains impersonating Coinbase
DomainFirst detectedStatus at last checkRegistrar
wallet-coinbase.com2026-10-20OnlineNICENIC
app.xstocksfidashboard.live2026-10-20OfflineNICENIC
931703coinbase.com2026-10-20UnknownNICENIC
713423coinbase.com2026-10-20OnlineNICENIC
496153coinbase.com2026-10-20OnlineNICENIC
237780coinbase.com2026-10-19OnlineNICENIC
zetachain.run2026-10-19OfflinePublicDomainRegistry.com
848472coinbase.com2026-10-19OnlinePublicDomainRegistry.com
cryptomarketarena.com2026-10-17OnlineSpaceship
coinbasefleetagent.fudace.es2026-10-16Online—
cryptomarketprime.com2026-10-15OfflineSpaceship
coinbase-jit.com2026-10-15OnlineDYNADOT
route-pool-h0i6.coin-base-exchange.com2026-10-15OnlineeName Technology
smart-safety.coinbase-gps.com2026-10-15OfflineeName Technology
smart-safety.coinbase-route.com2026-10-15OfflineeName Technology
coinbasextensions.com.expresscouriers.net2026-10-15OnlineSav.com
coinbasextensions.com2026-10-15OnlineSav.com
953771coinbase.com2026-10-13OfflineDominet (HK)
trust-chain-systems-eth-verify.network2026-10-13OnlineTucows Domains
liveness-coinbase.com2026-10-13UnknownNICENIC
coin-web3.click2026-10-13OnlineNameSilo
coin-web3.sbs2026-10-13OnlineNameSilo
coinbsc.com2026-10-13OnlineNameSilo
710631coinbase.com2026-10-13OnlineNICENIC
participate-papertrade.xyz2026-10-13UnknownNICENIC
take-papertrade.xyz2026-10-13UnknownNICENIC
proposals-papertrade.com2026-10-13OnlineNICENIC
allocation-netnet.icu2026-10-11OnlineEranet
allocations-netnet.top2026-10-11OnlineEranet
248211coinbase.com2026-10-11OnlineNICENIC
428749coinbase.com2026-10-11OnlineNICENIC
266385coinbase.com2026-10-11OnlineNICENIC
xrplatform-es.online2026-10-11OnlineDynadot
coninbase-wallet.com2026-10-11OfflineNICENIC
userhub-coinbase.com2026-10-11OfflineOnamae.com
953441coinbase.com2026-10-09OnlinePublicDomainRegistry.com
whiteway-coinbase.com2026-10-09OnlineNICENIC
jason-coinbase.com2026-10-09OnlineNICENIC
372121coinbase.com2026-10-09OnlineNICENIC
stratdelta.com2026-10-07OnlineNICENIC
ryan-coinbase.com2026-10-07OnlineNICENIC
robert-coinbase.com2026-10-07OnlineNICENIC
basixion.com2026-10-07OnlineNICENIC
franco-creditan.online2026-10-07OnlineDynadot
secure-coinbase-com-sign-in.typedream.app2026-10-07OnlineSquarespace Domains II
smtp6-coinbase.com2026-10-07OnlineHOSTINGER operations
holdings-coinbase.com2026-10-07OnlineNICENIC
autoconfig.190842-coinbase.com2026-10-06OnlineOwnRegistrar
9827841coinbase.com2026-10-04OnlineNICENIC
517291coinbase.com2026-10-04OnlineNICENIC

All 4,630 Coinbase reports

Where they are registered and hosted

Registrars

  1. Cloudflare758
  2. NiceNIC320
  3. Tucows Domains241
  4. CSC Corporate Domains229
  5. MarkMonitor203
  6. Gname.com181
  7. NICENIC172
  8. Dynadot136

Top-level domains

  1. .com1,660
  2. .dev663
  3. .app416
  4. .io213
  5. .xyz188
  6. .ai150
  7. .top98
  8. .net73

Hosting networks

  1. CLOUDFLARENET, US890
  2. AMAZON-02, US821
  3. CLOUDFLARENET - Cloudflare, Inc., US559
  4. Cloudflare, Inc.499
  5. Amazon.com, Inc.177
  6. Google LLC134
  7. AS-HOSTINGER Hostinger International Limited, CY129
  8. GOOGLE, US97

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Coinbase; share of all PhishDestroy reports: 2.06%.