WEBSITE ANALYSIS REPORT

http://max-coinbase.com/

26 Aug 2026 · 10:52:41.000 UTCpublic

Report tags: coinbase crypto phishing
Submit tags

Phishing detected

4 detections · review the detection signals

Review evidence →

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Phishing - Coinbase

VerdictPhishing

Severitymedium

Triggered on HTTP #2 HTTP #3 HTTP #5 HTTP #6 HTTP #9 HTTP #10 HTTP #11 HTTP #13 HTTP #16 HTTP #18 HTTP #20 HTTP #21 HTTP #22 HTTP #23 HTTP #24 HTTP #27 HTTP #29 HTTP #31 HTTP #32 HTTP #34 HTTP #35 HTTP #36 HTTP #37 HTTP #40 HTTP #42 HTTP #43 HTTP #44 HTTP #49 HTTP #54 HTTP #56 HTTP #58 HTTP #59 HTTP #60 HTTP #61 HTTP #62 HTTP #63 HTTP #64 HTTP #65 HTTP #66 HTTP #67 HTTP #68 HTTP #69 HTTP #72 HTTP #73 HTTP #74 HTTP #75 HTTP #78 HTTP #79 HTTP #83 HTTP #85 HTTP #86 HTTP #88 HTTP #89 HTTP #90 HTTP #91 HTTP #92 HTTP #93 HTTP #94 HTTP #95 HTTP #96 HTTP #97 HTTP #98 HTTP #99 HTTP #102 HTTP #103 HTTP #104 HTTP #106 HTTP #108 HTTP #109 HTTP #110 HTTP #111 HTTP #112 HTTP #113 HTTP #114 HTTP #115 HTTP #116 HTTP #117 HTTP #118 HTTP #119 HTTP #120 HTTP #122 HTTP #123 HTTP #126 HTTP #127 HTTP #130 HTTP #131 HTTP #132 HTTP #133 HTTP #134 HTTP #136 HTTP #138 HTTP #139

urlquery Phishing - Coinbase

VerdictPhishing

Severitymedium

Triggered on HTTP #2 HTTP #3 HTTP #5 HTTP #6 HTTP #9 HTTP #10 HTTP #11 HTTP #13 HTTP #16 HTTP #18 HTTP #20 HTTP #21 HTTP #22 HTTP #23 HTTP #24 HTTP #27 HTTP #29 HTTP #31 HTTP #32 HTTP #34 HTTP #35 HTTP #36 HTTP #37 HTTP #40 HTTP #42 HTTP #43 HTTP #44 HTTP #49 HTTP #54 HTTP #56 HTTP #58 HTTP #59 HTTP #60 HTTP #61 HTTP #62 HTTP #63 HTTP #64 HTTP #65 HTTP #66 HTTP #67 HTTP #68 HTTP #69 HTTP #72 HTTP #73 HTTP #74 HTTP #75 HTTP #78 HTTP #79 HTTP #83 HTTP #85 HTTP #86 HTTP #88 HTTP #89 HTTP #90 HTTP #91 HTTP #92 HTTP #93 HTTP #94 HTTP #95 HTTP #96 HTTP #97 HTTP #98 HTTP #99 HTTP #102 HTTP #103 HTTP #104 HTTP #106 HTTP #108 HTTP #109 HTTP #110 HTTP #111 HTTP #112 HTTP #113 HTTP #114 HTTP #115 HTTP #116 HTTP #117 HTTP #118 HTTP #119 HTTP #120 HTTP #122 HTTP #123 HTTP #126 HTTP #127 HTTP #130 HTTP #131 HTTP #132 HTTP #133 HTTP #134 HTTP #136 HTTP #138 HTTP #139

Threat Detection Systems

2

Nextron YARA rules Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type

Verdictmalware

Severitymedium

Public Nextron YARA rules

Triggered on HTTP #106

Matched indicatormax-coinbase.com/img/top_bg.CsRyxjoM.gif

Quad9 DNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #2 HTTP #3 HTTP #5 HTTP #6 HTTP #9 HTTP #10 HTTP #11 HTTP #13 HTTP #16 HTTP #18 HTTP #20 HTTP #21 HTTP #22 HTTP #23 HTTP #24 HTTP #27 HTTP #29 HTTP #31 HTTP #32 HTTP #34 HTTP #35 HTTP #36 HTTP #37 HTTP #40 HTTP #42 HTTP #43 HTTP #44 HTTP #49 HTTP #54 HTTP #56 HTTP #58 HTTP #59 HTTP #60 HTTP #61 HTTP #62 HTTP #63 HTTP #64 HTTP #65 HTTP #66 HTTP #67 HTTP #68 HTTP #69 HTTP #72 HTTP #73 HTTP #74 HTTP #75 HTTP #78 HTTP #79 HTTP #83 HTTP #85 HTTP #86 HTTP #88 HTTP #89 HTTP #90 HTTP #91 HTTP #92 HTTP #93 HTTP #94 HTTP #95 HTTP #96 HTTP #97 HTTP #98 HTTP #99 HTTP #102 HTTP #103 HTTP #104 HTTP #106 HTTP #108 HTTP #109 HTTP #110 HTTP #111 HTTP #112 HTTP #113 HTTP #114 HTTP #115 HTTP #116 HTTP #117 HTTP #118 HTTP #119 HTTP #120 HTTP #122 HTTP #123 HTTP #126 HTTP #127 HTTP #130 HTTP #131 HTTP #132 HTTP #133 HTTP #134 HTTP #136 HTTP #138 HTTP #139

Matched indicatormax-coinbase.com

Loading evidence…