Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/coinbase
Generated: Sat, 05 Sep 2026 11:15:32 GMT
Target Website: coinbase.com
Overall Trust Score: 90/100 (Trusted)
coinbase.com
Trusted
Scanned: Sep 5, 11:15 AMTRUST SCORE
90
CONFIDENT
Low Risk
90/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
15/100
15/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
90/100 — trusted. Long-established domain (15.2 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
C=US, O=Amazon, CN=Amazon RSA 2048 M01
Threat Status
CleanClean
No blacklists or malware
Domain Age
15.2 years15.2 years
Registered 7/2/2011
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
104.18.35.15104.18.35.15
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
100 / 100100 / 100
Fast response time
Redirects
1 Hop1 Hop
Redirect chain analyzed
Top Priority RecommendationAction Needed
Site returned HTTP 403
The server is reachable but did not return a success status.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- HTTPS is enforced
- Fast response (111ms)
- Served through Cloudflare
- 4 address record(s) resolved
- IPv6 (AAAA) available
- 2 authoritative nameservers
- Domain registered 15+ years ago
- Owner information disclosed
Warnings
- Site returned HTTP 403
- No privacy policy found
- No terms of service found
- No contact page found
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- July 2, 2011 (15.2 years ago)
- Last Updated
- May 31, 2026
- Registry Expiry Date
- July 2, 2028
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 15+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
All Response Headers (23)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Permissions Policy is set
Restricts access to powerful browser features (camera, mic, etc.).
+2
- IPv4 Addresses (A)
- 104.18.35.15, 172.64.152.241
- IPv6 Addresses (AAAA)
- 2a06:98c1:310d::6812:230f, 2a06:98c1:3102::ac40:98f1
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), alt3.aspmx.l.google.com (Priority: 10), alt4.aspmx.l.google.com (Priority: 10)
- Authoritative Nameservers (NS)
- sam.ns.cloudflare.com, sue.ns.cloudflare.com
- TXT Records Found
- 41 TXT verification records
A Records (IPv4)
104.18.35.15172.64.152.241
TXT Verification Records
1password-site-verification=2JYSQ7TWXVDP7DWPHTZRLBRESI
DirectFedAuthUrl=https://coinbase.okta.com/app/coinbase_pwc_1/exk1ke47d0l3gh5gp0x8/sso/saml
MS=ms23710130
TSW_ODg1dGVyYXN3aXRjaA==
ahrefs-site-verification_cc6fbe8f6b26b9b07f97892536cda45b7ce7917b040baacf81facc14e820e887
amp-by-sourcegraph-domain-verification-h888ba=g5N2hQggP0wSY4x7gSMgfvyyg
applause-verification:4e8f0335-526a-4a52-8da4-f4ecedc931ef
apple-domain-verification=7XHeC6zhfdUOulBSjnUyABNhGLx2RMnjebZj2HMPH4w
apple-domain-verification=8HpWlON81jar5xva
atlassian-domain-verification=hDuZ4Ho1Rts/J4kaoxR9K2Qnywy2Uo+GV8bDIwXEsE4uovTo0vcL+8AVpI4+3j2V
cloudflare_dashboard_sso=2306d311a1bc9c50590c204bf0e527d8
cursor-domain-verification-tqme34=zHJPl1GeHjzl9e5kOqNqpcepA
de7f455f-f2f0-4669-8193-08e31bfab40f
docusign=642eb6c3-8697-4ebd-8a51-a48a05713018
docusign=8ace657e-b7bc-4ed2-9cb3-8aa55e7d0597
dropbox-domain-verification=ap29irieph9f
facebook-domain-verification=qbphvvib286cbvluswam0qypj99ofm
giga-domain-verification-956jz3=BliOUPqeH2xWvVWYcEmFCxcwC
google-site-verification=5Vrsjlgs1uhwN5AU2Vg1TPuEBasNdhX3CgxtfTdXOQQ
google-site-verification=8ww1MRKa0mZPc-WdoZ7YdL64qIE_2bJuIyIagaQqzFo
google-site-verification=F0pv18D2VaKyH77hhpE9OZuDVipTi_YUGqKGzSOUfnQ
google-site-verification=Mf-1A418PKg0c9t2nAaK4zjWv2A_N8uNGu078EWqCZc
google-site-verification=gwL0hNTFdVrIO_MRAN6m07GJs7aZFGC-XkJcaq8We2s
google-site-verification=qyTrwiATuVJMBGXPOYPOr-NSYW90-idNJU7uTh6-v7Y
google-site-verification=veWhMcRP5-ISDr7tSAI7Mjh9ELqQ7ndOvbHY-xcsl9o
jumio-up-idp-domain-verification=59dc5c59-80b3-4697-a85f-e4432d7ba047
keybase-site-verification=UlVJ6_FMc2ceBGKC2cjhy8FF1iGw-iuvdc1WzRX7foU
miro-verification=790dc2010116c659230c25705d7a5358cd78d99b
mongodb-site-verification=hME8tDWzya9rzZbckAxwpiEiv12KX8Gd
onetrust-domain-verification=f131f1d66b1b445cb8edc36b8edd78e8
plain-domain-verification-5y5tn9=TNqQhlpQ8Bn39aDEnApFcwOxC
pylon-domain-verification-sc64gk=B7nJiLr0KeZ0CRv2aVkYTNfjs
slack-domain-verification=MlD3gzX7txujPKkmWsULE6w264DyKkTkxbT7nPTd
smartsheet-site-validation=kyRJbpapnk1ExowiffTo0f3Pc-9XKoSh
stripe-verification=f66cbde9148f67d1bb992cfe5ae3fc1efa829c816b726b0bb28ff243325344dc
tiktok-developers-site-verification=HrFgIdc7KnV2NknroIrwPpiieVmSJjYz
v=spf1 include:amazonses.com include:_spf.google.com -all
vercel-domain-verification-zvp7d4=jvZ5HXRxnwIhxdzt26biEw6Oh
verification_token=KH5SwHZXz5rsFGMABj81aGBnF
verification_token=N5mizUogMNMbNmoFTKuh7KCwg
verification_token=fsUf5PQLIwq7nf4HOoQN6ZUCz
4 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
2 authoritative nameservers
+2
- Registrable Domain
- coinbase.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- sam.ns.cloudflare.com, sue.ns.cloudflare.com
- Registration Lifecycle
- Registered: 2011 → Expires: 2028
Nameservers (NS)
sam.ns.cloudflare.comsue.ns.cloudflare.com
Domain registered 15+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 include:amazonses.com include:_spf.google.com -all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; adkim=s; aspf=s; fo=1; rua=mailto:jpohmdhp@ag.dmarcian.com; ruf=mailto:jpohmdhp@fr.dmarcian.com;
- DKIM Selectors Detected
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- coinbase
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- Official Domain (coinbase)
- Typosquatting Risk
- Clean
coinbase is the real brand's registered domain
The root label matches the brand exactly — this IS the brand's own domain.
+10
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Just a moment...
- Meta Description
- —
- Document Language
- en-US
- Character Encoding
- UTF-8
- Viewport Setting
- width=device-width,initial-scale=1
- Generator Software
- —
1 technologies detected
Cloudflare
Mobile viewport configured
+2
Missing meta description
-2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 111 ms
- Payload Body Size
- 5.5 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
No findings.
AI Content Evaluation
90/100 — trusted. Long-established domain (15.2 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 60 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 104.18.35.15
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://www.coinbase.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://coinbase.com/ → https://www.coinbase.com/
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (111ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- C=US, O=Amazon, CN=Amazon RSA 2048 M01
- Subject Common Name (CN)
- advanced-trade-ws-user.coinbase.com
- Validity Period
- 192 days remaining (Expires: 2027-03-16T23:59:59)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 2969 certs recorded
Subject Alternative Names (Sample)
advanced-trade-ws-user.coinbase.combilling-systems.coinbase.comrepresentative--coinbase.comnft-events.coinbase.comciti-intl-sign-dev.coinbase.comciti-intl-transport-dev.coinbase.comcorporate.crl.coinbase.comjpmorgan-callback.coinbase.comciti-v2-sign-staging.coinbase.comciti-v2-transport-staging.coinbase.comdevelopment-device.crl.coinbase.comrecruiting.coinbase.compayments-demo.coinbase.cominvestor.coinbase.comsandbox.crl.coinbase.comapi.prime.coinbase.comfix-direct.prime.coinbase.comfix-md.prime.coinbase.comfix.prime.coinbase.comdemo.payments.coinbase.com+20 more
Valid SSL / TLS certificate active
Issued by C=US, O=Amazon, CN=Amazon RSA 2048 M01, valid for 192 remaining days.
+10
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 1788606932-1.2.1.1-3, 1788606932, 1788606932-1.0.1.1, 1788606932-1.2.1.1
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
No contact page found
Reputable sites usually publish a contact page.
-4
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.coinbase.com/sitemap-converter-index.xml, https://www.coinbase.com/sitemap-derivatives-index.xml, https://www.coinbase.com/sitemap-prediction-markets-index.xml, https://www.coinbase.com/sitemap-equities-index.xml, https://www.coinbase.com/sitemap-how-to-buy-index.xml, https://www.coinbase.com/sitemap-prices-index.xml, https://www.coinbase.com/sitemap-price-prediction-index.xml, https://www.coinbase.com/sitemap-staking-index.xml, https://www.coinbase.com/sitemap-careers.xml, https://www.coinbase.com/sitemap-learn.xml, https://www.coinbase.com/sitemap-bytes.xml, https://www.coinbase.com/sitemap-institutional.xml, https://www.coinbase.com/sitemap-blog.xml, https://www.coinbase.com/sitemap-marketing.xml, https://www.coinbase.com/sitemap-advanced.xml
- Disallow Rules Count
- 22 rules
View Raw robots.txt
# # # :$$$ # $II :III # III :III # :III # +ZZ+ ?ZZ~ +ZZZI :III ?I+ IZZ7 +ZZI IZZ~ # .7IIIIII ~IIIIIIII $II 7IIIIIIIII7 :IIIIIIIII$ IIIIIIIII7 7IIIIIII 77IIIIIII # ZIII. : ZIII III $II 7II IIII :III III7 I III: 7II. ZII, III. # III III III $II 7II III :III III= III III II: III # +III ZII, III $II 7II III :III III .Z$7IIIII ,III7 $II +Z$III # 7II+ $II 7II $II 7II III :III III ZIIII~ III ?IIIII $IIIIIIIIII: # ~III III= III $II 7II III :III III ZII III IIII III # III III ,III $II 7II III :III 7II 7II III III III # .III7 :$ ~III? ZIII $II 7II III :III $III =III III Z$ ~7III III7 7$ # IIIIII IIIIIII? $II 7II III :IIIIIIIII ,IIIIIIIIII IIIIIIII. IIIIIIII # # Bitcoin Made Easy - Coinbase is the simplest way to buy, use, and accept Bitcoin. # # https://www.coinbase.com/careers # User-Agent: facebookexternalhit Allow: / User-Agent: Twitterbot Allow: / User-Agent: LinkedInBot Allow: / User-Agent: WhatsApp Allow: / User-agent: Slackbot Allow: / User-agent: Discordbot Allow: / User-agent: AdsBot-Google Allow: / User-agent: AdsBot-Google-Mobile Allow: / User-Agent: * Disallow: /oauth/ Disallow: /*/oauth/ Disallow: /signup-interstitial Disallow: /*/signup-interstitial Disallow: /join/ Disallow: /*/join/ Disallow: /spot/* Disallow: /*/spot/* Disallow: /advanced-trade/spot/ Disallow: /*/advanced-trade/spot/ Disallow: /converter/*/*?currencyPage* Disallow: /*/converter/*/*?currencyPage* Disallow: /price/*?locale* Disallow: /*/price/*?locale* Disallow: /partner/ Disallow: /*/partner/ Disallow: /lp/ Disallow: /*/lp/ Disallow: /*/cookie-preferences Disallow: /*/*/cookie-preferences Disallow: /cookie-preferences Disallow: /*/cookie-preferences Allow: /.well-known/ Sitemap: https://www.coinbase.com/sitemap-converter-index.xml Sitemap: https://www.coinbase.com/sitemap-derivatives-index.xml Sitemap: https://www.coinbase.com/sitemap-prediction-markets-index.xml Sitemap: https://www.coinbase.com/sitemap-equities-index.xml Sitemap: https://www.coinbase.com/sitemap-how-to-buy-index.xml Sitemap: https://www.coinbase.com/sitemap-prices-index.xml Sitemap: https://www.coinbase.com/sitemap-price-prediction-index.xml Sitemap: https://www.coinbase.com/sitemap-staking-index.xml Sitemap: https://www.coinbase.com/sitemap-careers.xml Sitemap: https://www.coinbase.com/sitemap-learn.xml Sitemap: https://www.coinbase.com/sitemap-bytes.xml Sitemap: https://www.coinbase.com/sitemap-institutional.xml Sitemap: https://www.coinbase.com/sitemap-blog.xml Sitemap: https://www.coinbase.com/sitemap-marketing.xml Sitemap: https://www.coinbase.com/sitemap-advanced.xml
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
38
This scan
Sources Checked
18
Live security feeds
Scan Duration
2.51s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk