649715-coinbase.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of 649715-coinbase.com
649715-coinbase.com appears to be a newly registered website using the Coinbase brand name within its domain. Based on the domain structure, classification data, and the referenced path names, the site may be attempting to present itself as related to cryptocurrency account or wallet services. The inclusion of "coinbase" in the domain strongly suggests an effort to attract users looking for the well-known digital asset platform.
Available data does not indicate that this is an official Coinbase-owned domain. Instead, the domain appears to be a look-alike variant with an added numeric prefix, which is a pattern commonly associated with imitation or deceptive campaign infrastructure. The site is categorized as phishing by web-classification sources, and its very recent registration further suggests it may have been set up for short-term use rather than as an established service.
Safety Assessment for 649715-coinbase.com
Multiple scan signals indicate elevated risk at the time of this scan. The domain was flagged by 7 out of 91 security engines, including several phishing-focused and blacklist-based systems, and it was listed by major threat databases for social-engineering or phishing-related activity. In addition, the domain closely resembles coinbase.com and may be a look-alike intended to mislead visitors into believing it is connected to the legitimate Coinbase brand.
There are further cautionary indicators beyond the phishing detections. The domain was registered the same day it was scanned, has no established traffic ranking, and its IP address is listed on one mail-reputation blocklist. While the malware scan did not identify confirmed malicious files, it did report generic suspicious indicators on the domain and linked resources, which may be consistent with obfuscated or temporary phishing infrastructure. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses a valid Let's Encrypt SSL certificate, which means traffic may be encrypted in transit, but certificate presence alone does not indicate legitimacy. DNSSEC appears to be unsigned, the registrar is DYNADOT LLC, and the nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net. The domain is hosted on IP address 144.172.96.180 with hosting attributed to FranTech Solutions in Staten Island, United States.
From a security perspective, the most notable technical concerns are the domain's age of 0 days, the lack of DNSSEC signing, and the presence of several suspicious JavaScript resource paths flagged during scanning. The server software and protocol details were not identified in the available scan data.
Share your experience with this website. Was it safe? Did you encounter any issues?