coinbase-verify[.]swaria[.]com

coinbase-verify.swaria.com is a subdomain of swaria.com. PhishDestroy first observed the hostname on Sep 3, 2026. The hostname explicitly references Coinbase and uses “verify,” a pattern consistent with a account-verification lure; stored content metadata identifies the same apparent target. Current evidence score: 66/100 (high).

Positive findings are stored from 4 sources: VirusTotal, MetaMask, SEAL, and URLQuery. VirusTotal stored 4 positive engine results: ChainPatrol, alphaMountain.ai, BitDefender, G-Data; the total engine count is unavailable or inconsistent, and no check timestamp is available. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Sep 3, 2026 at 18:20 UTC. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: Google Safe Browsing returned no flag on Sep 3, 2026 at 20:12 UTC. URLScan captured the page on Sep 3, 2026 at 18:34 UTC.

The collector marked the hostname reachable on Sep 3, 2026 at 18:34 UTC, but did not retain the HTTP response code. Registration records for the registrable domain swaria.com list Hosting Concepts B.V. d/b/a Registrar.eu as the registrar and Oct 8, 2000 as the creation date. At collection time, the hostname resolved to 185.84.140.110. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Oct 21, 2026; checked Sep 3, 2026 at 19:02 UTC.

The content indicators and 4 positive source findings support the current Coinbase-themed account-verification phishing classification. The target field identifies Coinbase, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.