Выполняйте поиск по отслеживаемым доменам и просматривайте сохраненные доказательства, данные об обнаружениях и последние данные о доступности.
199,390
Всего отслеженных
193,860
Обнаружено VT
92,450
Последнее появление: активен
106,940
По последним данным — недоступно
202
VT — в процессе рассмотрения
How This Attack Works
Coinbase phishing attacks deceive users into revealing their credentials. Understanding the attack process can help in prevention.
STEP 1
Initial Contact
Victims receive fraudulent communications, often emails, mimicking Coinbase.
STEP 2
Phishing Link
Emails contain links to fake websites closely resembling the Coinbase login page.
STEP 3
Credential Harvesting
Users unknowingly enter their credentials on these fake sites, compromising their accounts.
STEP 4
Exploitation
Attackers use stolen information to access and drain victims' Coinbase accounts.
Technical Analysis
Coinbase phishing attacks often employ sophisticated techniques to mimic legitimate Coinbase experiences. Attackers use cloned websites with SSL certificates to give the appearance of security. JavaScript is frequently utilized to capture keystrokes or form submissions containing login credentials. In some cases, attackers deploy phishing kits that automate the creation of phishing sites. These kits can include templates and scripts that replicate the Coinbase website's functionality and appearance. The infrastructure behind these attacks often relies on rogue domains hosted by commonly used registrars like CSC Corporate Домены, Inc. and TUCOWS DOMAINS, INC. Attackers also use URL obfuscation and IP address manipulation to avoid detection by security systems.
Real Cases
Massive Phish Attack (2024)
$5 million stolen
A coordinated attack compromised thousands of Coinbase accounts, leading to substantial financial losses.
Crypto Wallet Breach (2023)
$3 million stolen
Phishing emails led to an unauthorized access of Coinbase wallets, resulting in multi-million dollar theft.
Phishing Campaign (2024)
$7 million stolen
A widespread campaign targeted Coinbase users, stealing millions by redirecting them to fraudulent sites.
How to Detect
Emails from unofficial Coinbase domains
URLs with misspellings or extra characters
Срочно security alert emails demanding immediate action
Requests for personal information via email
Inconsistent visual elements compared to the official Coinbase site
How to Protect Yourself
1
Verify the sender's email address
2
Hover over links to check URL legitimacy
3
Enable two-factor authentication on your Coinbase account
4
Regularly update passwords and security settings
5
Отчет suspicious emails to Coinbase and PhishDestroy
Frequently Asked Questions
Data sourced from PhishDestroy threat intelligence database — 4,295 domains tracked for this threat type
Coinbase Phishing 4,295 domains

488543-coinbase.com

coinbase-commerce.gives

help-coinbase.beer

pro-coins-secure-cdns.created.app

133750-coinbase.com

649715-coinbase.com

con-baseulogrn.godaddysites.com

m.help-coinbase.beer

securitycheck-coinbase.com

stats-coinbase.com

8563-coinbase.com

app.maxcoinbase.com

base.assist-us.xyz

coaakkzz.top

coinbase-card.vip

coinbase-clone-silk.vercel.app

coinbase-learn.framer.media

coinbaseloginu.blogspot.com

cpcontacts.20-120-116-237.cprapid.com

mail.login-coinbase.net

v0-coinbase-login-page.vercel.app

web3securityguard.com.hedgepremiumcapital.com

121dax.senes.at

121hiu.senes.at

837485coinbase.com

admin.coinbase-china.info

bitz.rolastopas.cc

coin.volcanovip.cc

coinbase-walet.me

coinbaseinv.com

cpanel.129-121-102-216.cprapid.com

eng-coinbasepro-us.typedream.app

fixed-coinbase.com

kukcoiinzlogen.webflow.io

official-coinbus-help.typedream.app

rugvision.live

test43593543598.lol

web3-coinbase.top

welcome-coinbase-cdns.zapier.app

121gle.senes.at

121jio.senes.at

121sef.dartello.cc

343243-coinbase.com

947839-coinbase.com

alkjglkr.top

amount.999coin.top

coinbase-clone-ruddy.vercel.app

coinbase-custodialhelp.com

coinbase.kongjs.jp

coinbasebasprologin.godaddysites.com

coinsquuuarelogiin.webflow.io

cpanel.login-coinbase.net

diagnose-google.com

enthodex.online

event-coinbase.fun

faq-coinpro-home.zapier.app

get-coinebsed.framer.media

jbapamxtra.my

nxjohny-user-coinbaseaml-blurtrench.pages.dev

page-setup-coins.zapier.app

projblac.com

recovery-help-coinbase.com

ssocoinbasepro.wixstudio.com

web-sso-coinbase-app.square.site

108909-cb.com

118924-coinbase.com

176541.am.coinbase.com.lc

191758a-coinbase.com

230951-coinbase.com

381884-coinbase.com

392847-coinbase.com

4rimehgfedcbasandbox.am.coinbase.cm

876231-coinbase.com

97ee3.catex.at

admin.coinbasee.one

app-basecoines.zapier.app

base-helpdesk.vercel.app

coeettrr.top

coibssepprologi.godaddysites.com

coimbaseprollogin.webflow.io

coin-base-pro-login-faq.tem3.io

coinbas.one

coinbase-blog.com

coinbase-event.fun

coinbase-login-eight.vercel.app

coinbase-securityportal.com
Процесс реагирования на угрозы
Как мы проверяем каждый домен в этом разделе и нейтрализуем подтверждённые угрозы. Полная визуализация конвейера →
Проверка по источникам данных об угрозах— каждый домен сканируется и сверяется со следующими источниками:
urlscan.ioСнимок экрана · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ОтчетCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Безопасность FiltersQuad9 · AdGuard · CleanBrowsingWeb-ПроверитьFull surface scan
Передача данных партнёрам— подтверждённые детекты передаются 29 партнёрам:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecОбзор сайтаAviraCloud detectionAvast / AVGWeb Shield«Касперский»OpenTIPDr.WebOnline scannerNetcraftЛиквидация APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ОтчетHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust