learn-coinbasextension-us[.]pages[.]dev
“Suspected phishing site | Cloudflare”
已存储的观测记录
观测到的标题差异
证据摘要
The domain learn-coinbasextension-us.pages.dev displayed a page titled "Suspected phishing site | Cloudflare," indicating it was designed to impersonate the Coinbase brand for cryptocurrency theft. The site posed a threat by attempting to steal login credentials or cryptocurrency assets from users through social engineering.
Technical evidence: VirusTotal flagged the domain with 14 out of 95 detections. Google Safe Browsing flagged it for SOCIAL_ENGINEERING. The domain was created on 2025-09-10, registered through Cloudflare, Inc., and hosted on IP 172.66.47.158 (US, AS13335 Cloudflare, Inc.). It uses an SSL certificate from Google Trust Services / WE1, with nameservers hal.ns.cloudflare.com and dell.ns.cloudflare.com.
As of analysis, the site is DOWN/OFFLINE. Risk is high, with a DOM risk score of 100, GridinSoft trust at 0/100, and ScamAdviser trust at 50/100. One blocklist entry and flags from ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CyRadar confirm the threat.
Data Coverage
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
检测时间线
技术
识别出 3 项高置信度技术
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of learn-coinbasextension-us.pages.dev · checked Mar 2, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控