app.max-coinbase.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of app.max-coinbase.com
The domain app.max-coinbase.com appears to present itself as a cryptocurrency or financial-services landing page associated with Coinbase. The page title is "Coinbase," and the screenshot shows Coinbase branding, a mobile-focused trading message, and a prominent "Download Now" call to action. Based on the visible content, the site appears designed to attract users interested in managing digital-asset transactions from a mobile device.
However, the domain name is not the official Coinbase domain and closely resembles it by combining the brand name with additional wording. That pattern, together with the financial-services categorization and branding shown on the page, suggests the site may be attempting to look like a Coinbase-related app or portal rather than operating as an independently branded service. No clear operator identity is visible in the provided scan data.
Safety Assessment for app.max-coinbase.com
This domain was flagged by 10 out of 91 security engines at the time of the scan, with multiple detections describing phishing or other fraudulent behavior. In addition, the domain closely resembles coinbase.com and may be a look-alike intended to benefit from user trust in that brand. The page title and screenshot also reinforce that resemblance by displaying Coinbase branding on a separate, newly registered domain.
Other risk indicators add to the concern. The domain is only 2 days old, has no established traffic ranking in the provided data, and its IP address is listed on one mail-reputation blocklist. While a DNS-based mail-reputation listing is a weaker signal than direct malware or phishing detections, it still adds minor caution. Although the malware file scan did not detect flagged files and several threat databases were clean at the time of this scan, those points do not outweigh the combination of multi-engine phishing detections, brand resemblance, and extreme domain newness.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate expiring on 2026-11-22 and is served over nginx from an AWS EC2 host in Ashburn, United States (IP: 54.164.64.0). Use of HTTPS indicates encrypted transport was present at the time of the scan, but certificate validity alone does not verify the legitimacy of the operator.
The domain was created very recently, on 2026-08-24, through Gname.com Pte. Ltd., and DNSSEC appears to be unsigned. Nameservers are set to SHARE-DNS infrastructure. From a technical-risk perspective, the most notable concerns are the very recent registration, lack of DNSSEC, and the mismatch between the Coinbase branding shown on the page and the non-official domain name.
Share your experience with this website. Was it safe? Did you encounter any issues?