wallet-extension-coinbase[.]pages[.]dev
“Suspected phishing site | Cloudflare”
证据摘要
The domain wallet-extension-coinbase.pages.dev hosted a website titled "Suspected phishing site | Cloudflare" that impersonated the Coinbase brand to conduct cryptocurrency scam operations. This site posed a threat by attempting to deceive users into providing sensitive information or cryptocurrency credentials through social engineering, as flagged by Google Safe Browsing for SOCIAL_ENGINEERING.
Technical analysis reveals 13 out of 95 VirusTotal vendors detected the site as malicious. The domain was registered through Cloudflare, Inc. and created on 2026-02-21, with IP address 172.66.44.243 (US) hosted by AS13335 Cloudflare, Inc. SSL certificate was issued by Google Trust Services / WE1, and nameservers were tiffany.ns.cloudflare.com and milan.ns.cloudflare.com. The site was flagged by ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CyRadar, with a GridInSoft trust score of 0/100.
Currently, the site is DOWN/OFFLINE. The DOM risk score is 100, indicating maximum risk. The domain appears on 1 blocklist. Users should avoid any interaction with this domain due to confirmed phishing activity and high threat level.
Data Coverage
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月13日
检测时间线
技术
识别出 2 项高置信度技术
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of wallet-extension-coinbase.pages.dev · checked Apr 13, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控