preview-coinbase.com
Categoria: Phishing
Para usar o produto com todas as funcionalidades, tem de adquirir uma licença do Combo Cleaner. Está disponível um teste gratuito limitado de sete dias. O Combo Cleaner é propriedade e operado pela RCS LT, a empresa-mãe do PCRisk.com.
Descrição de preview-coinbase.com
The domain preview-coinbase.com appears to present itself in a way that references Coinbase, a well-known cryptocurrency exchange and wallet platform. Based on the domain structure and the available scan context, it may be intended to mimic or resemble a Coinbase-related page rather than operate as an independent, clearly branded service. The use of the word "preview" alongside a major financial brand name is a common pattern seen on temporary-looking or campaign-style web pages.
The site appears to be associated with cryptocurrency or account-access workflows, as suggested by the domain naming and the presence of scripts such as payform.js, loading.js, logger.js, finish.php, and loading.php. Those elements may indicate a staged form or credential-collection flow rather than a conventional informational website. No evidence in the provided data suggests that this domain is an official Coinbase-owned property.
Based on the available information, this website appears to fall under a phishing-related cryptocurrency/finance context rather than a legitimate standalone business website.
Avaliação de segurança de preview-coinbase.com
This domain shows multiple high-risk indicators at the time of this scan. It was flagged by 17 out of 91 security engines, with many of those detections describing the site as phishing or malicious. In addition, it appears on a major safe-browsing blacklist for social engineering, which is a strong signal that the page may be involved in deceptive activity aimed at collecting credentials, wallet details, or other sensitive information.
The domain also closely resembles coinbase.com and may be a look-alike intended to benefit from user confusion. That resemblance is especially concerning because the site is very new, not ranked among popular domains, and lacks the reputation signals typically associated with established financial platforms. While the malware file scan did not detect malicious files in the sampled content, phishing pages often rely on deceptive forms and branding rather than downloadable malware, so a clean file scan does not materially reduce the concern here.
Based on these findings, this website may pose potential risks to visitors.
Descrição técnica
The domain is relatively new, with an age of about 85 days at the time of this scan, and uses Cloudflare-hosted nameservers and infrastructure. It resolves through Cloudflare IP space and presents a valid Let's Encrypt SSL certificate, which indicates encrypted transport but does not by itself establish legitimacy. DNSSEC appears to be unsigned, which is not uncommon but does mean there is no added DNS integrity protection from DNSSEC validation.
The observed site resources include JavaScript and PHP files consistent with a form-driven workflow, including logger.js, payform.js, loading.php, and finish.php. In the context of the phishing-related detections and blacklist listing, those components may support a credential-harvesting or staged social-engineering page. No malicious files were flagged in the provided malware scan sample, but the broader reputation data remains the more significant concern at the time of this scan.
Partilhe a sua experiência com este website. Era seguro? Encontrou algum problema?