inspection-coinbase[.]com

The domain inspection-coinbase.com is a confirmed phishing site engaged in brand impersonation, specifically targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, likely through email-based scams. No crypto drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate risk, but prior visitors may still face consequences from exposed credentials.

Technical analysis of inspection-coinbase.com reveals limited but notable detection. The domain was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, while Google Safe Browsing did not detect it. It appeared on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. Registered through Hello Internet Corp on February 19, 2026, the domain resolved to the IP address 142.251.150.119, hosted on Google LLC's infrastructure (AS15169). The SSL certificate was issued by WE2, and the observed page title was 'Google'. Gridinsoft assigned a trust score of 0/100, reinforcing its malicious classification.

Users who interacted with inspection-coinbase.com should take immediate action to mitigate risk. If credentials were entered, change passwords for the affected account and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any fraudulent transactions. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims of phishing scams may also file complaints with organizations such as the FTC or IC3.