Report Overview
URL
coinbase.ct.ws/
Finishing URL
coinbase.ct.ws/signin?client_id=6a7e5810bfe4f-6a7e5810bfe51-6a7e5810bfe52-6a7e5810bfe53&oauth_challenge=6a7e5810bfe54-6a7e5810bfe55-6a7e5810bfe56-6a7e5810bfe57
IP / ASN
185.27.134.98
Title
Coinbase - Sign In
Phishing - Coinbase
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
coinbase.ct.ws 40 alert(s) on this Host | unknown | 2024-11-01 | 2026-08-13 | 2026-08-13 | 6.7 kB | 1.4 MB | 185.27.134.98 |    |
ipapi.co | 7936 | 2016-04-19 | 2017-01-31 | 2026-08-13 | 1.8 kB | 10 kB |  104.26.9.44 |  |
OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | coinbase.ct.ws | malicious | Sinkholed |
| DNS4EU | coinbase.ct.ws | malicious | Sinkholed |
| Quad9 DNS | coinbase.ct.ws | malicious | Sinkholed |
JavaScript (6)
No JavaScripts
HTTP Transactions (14)
| URL | IP | Response | Size |
|---|