wallet[.]coinbase[.]property
“coinbase.property”
Evidence Summary
The domain wallet.coinbase.property poses a significant threat as it is involved in brand impersonation, specifically targeting the Coinbase brand. This kind of threat aims to deceive users into believing they are interacting with the legitimate Coinbase website, thereby potentially gaining access to sensitive financial information. The domain's page title, 'coinbase.property,' further reinforces the deceptive strategy by imitating the branding of the legitimate entity, increasing the risk of users being misled.
Analysis of wallet.coinbase.property reveals several concerning technical details. The domain was registered through Porkbun LLC and was created on October 26, 2024, indicating its recent establishment, which can be a red flag for phishing domains. Currently, this domain resolves to the IP address 199.59.243.228. According to VirusTotal, the domain has been flagged by 3 out of 95 security vendors, indicating that while not widely detected, it is recognized by some as a threat. Additionally, it appears on one security blocklist, underscoring the elevated risk associated with it. The domain is currently offline, reducing immediate risk, but historical access could still pose a threat to those who visited.
Users who have interacted with the domain wallet.coinbase.property should take immediate action to secure their accounts. It is recommended to change passwords associated with financial accounts, particularly those related to Coinbase, and to monitor for any unauthorized transactions. Utilizing multi-factor authentication can provide an additional layer of security. Users should remain vigilant and verify they are on the official Coinbase website by checking the URL carefully before entering any login credentials. If suspicious activity is detected, it is advised to report it to the relevant authorities or security teams to prevent further exploitation.
Data Coverage
Network Security Intelligence
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
-
Cloudflare Radar
Cloudflare Radar scan stored · Open scan
-
VirusTotal
5 → 3
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Registration: coinbase.property
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For the registrable domain coinbase.property behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive