public company · US

Coinbase

Coinbase Global, Inc.

Cryptocurrency exchange.

Primary official domain
coinbase.com
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
342
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
3
domains first source-reported within 30 days
First observed, 30 days
362
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
Not checked
No email-policy check yet

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
coinbase
Label aliases
Coinbase
Official domains
coinbase.com (all)
Generated spellings
117 tracked · 63 observed somewhere · 54 not observed (all)
Can receive mail
8 spellings and 93 reported domains publish MX records · mail at Above.com parking (parking placeholder) 26 · Beget 3 · Dynadot parking (parking placeholder) 3 · 52 more (63 spellings and 342 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
049734-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive172.173.173.90Microsoft AzureMicrosoft Azure (AS8075) · USchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
107389coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 20:49 UTC
1 source · 1 recordDetails
108738coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 20:49 UTC
1 source · 1 recordDetails
109952coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 20:49 UTC
1 source · 1 recordDetails
149561coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive45.137.198.27ROYALE-AS (AS212477) · NLhosted-by.royalehosting.netchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
154693-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.76.123CloudflareCloudflare (AS13335) · US172.67.194.53CloudflareCloudflare (AS13335) · US2606:4700:3030::6815:4c7bCloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:c235CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
163394coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.33.162CloudflareCloudflare (AS13335) · US172.67.164.198CloudflareCloudflare (AS13335) · US2606:4700:3031::ac43:a4c6CloudflareCloudflare (AS13335) · US2606:4700:3036::6815:21a2CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
164196-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 20:50 UTC
1 source · 1 recordDetails
164839coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.96.73CloudflareCloudflare (AS13335) · US172.67.174.69CloudflareCloudflare (AS13335) · US2606:4700:3030::ac43:ae45CloudflareCloudflare (AS13335) · US2606:4700:3035::6815:6049CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
185389coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 20:50 UTC
1 source · 1 recordDetails
188590coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.13.20CloudflareCloudflare (AS13335) · US172.67.132.117CloudflareCloudflare (AS13335) · US2606:4700:3033::6815:d14CloudflareCloudflare (AS13335) · US2606:4700:3036::ac43:8475CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
autoconfig[.]190842-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.5.12CloudflareCloudflare (AS13335) · US172.67.132.184CloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:84b8CloudflareCloudflare (AS13335) · US2606:4700:3037::6815:50cCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:50 UTC
1 source · 1 recordDetails
191758a-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 20:50 UTC
1 source · 1 recordDetails
19203910-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive162.159.140.166CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
19243coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 20:50 UTC
1 source · 1 recordDetails
1985621-secure-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 20:50 UTC
1 source · 1 recordDetails
248211coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.30.204CloudflareCloudflare (AS13335) · US172.67.173.220CloudflareCloudflare (AS13335) · US2606:4700:3031::ac43:addcCloudflareCloudflare (AS13335) · US2606:4700:3036::6815:1eccCloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
3399581-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive103.224.182.189Trellian (Above.com parking)Trellian (Above.com parking) (AS133618) · AUlb-182-189.above.comchecked 2026-10-18 21:00 UTC
1 source · 1 recordDetails
350291-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive64.89.161.118 · Emerging Threats open block listBLATANTHOST - Blatant (AS403005) · SCchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
381884-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 21:00 UTC
1 source · 1 recordDetails
392847-coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.21.81CloudflareCloudflare (AS13335) · US172.67.197.13CloudflareCloudflare (AS13335) · US2606:4700:3031::6815:1551CloudflareCloudflare (AS13335) · US2606:4700:3036::ac43:c50dCloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
401564coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive87.121.79.166checked 2026-10-18 21:00 UTC
1 source · 1 recordDetails
428749coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.8.17CloudflareCloudflare (AS13335) · US172.67.156.177CloudflareCloudflare (AS13335) · US2606:4700:3033::6815:811CloudflareCloudflare (AS13335) · US2606:4700:3035::ac43:9cb1CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
453241-coinbase[.]comMail: Lookup failed · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
SERVFAILchecked 2026-10-19 05:55 UTC
1 source · 1 recordDetails
456734coinbase[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 21:00 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.