Is coinbase.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Why: Main reasons: domain registered 15+ years ago; coinbase is the real brand's registered domain; no impersonation patterns detected. Minor issues: site returned HTTP 403; certificate expires soon (6 days).
Positive highlights
- Domain registered 15+ years agoLong-established domains are far less likely to be disposable scams.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Valid SSL / TLS certificate activeIssued by C=US, O=Google Trust Services, CN=WE1, valid for 6 remaining days.
- coinbase is the real brand's registered domainThe root label matches the brand exactly — this IS the brand's own domain.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Fast response (90ms)
- Not present in PhishStats phishing feed
- HSTS is setTells browsers to only use HTTPS for this domain.
- DMARC published (reject)
Negative highlights
- Site returned HTTP 403The server is reachable but did not return a success status.
- Certificate expires soon (6 days)
Note: Registered via MarkMonitor Inc..
Note: 2 technologies detected. Google Analytics, Cloudflare
Note: Policy pages could not be checked. The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Key facts about coinbase.com
- Website
- coinbase.com
- Popularity
- Not checked
- Domain created
- Jul 2, 2011 (15.4 years old)
- Domain expires
- Jul 2, 2028
- Registrar
- MarkMonitor Inc.
- Owner details
- Public in WHOIS
- IP address
- 104.18.35.15
- Hosting / CDN
- Cloudflare
- SSL certificate
- Google Trust Services · valid until Nov 19, 2026
- Email security
- SPF ✓ · DMARC ✓ (reject)
- Threat blocklists
- Not listed (clean)
- Technology
- Google Analytics, Cloudflare
Summary
94/100 — trusted. Long-established domain (15.4 years old), clean threat reputation, no impersonation patterns.
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- July 2, 2011 (15.4 years ago)
- Last Updated
- May 31, 2026
- Registry Expiry Date
- July 2, 2028
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
cf-ray: a59db04429e8abe5-YYZ
connection: close
content-length: 5630
content-security-policy: default-src 'none'; script-src 'nonce-hNJXkbfvIUpq2IUqNeKmL0' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'
content-type: text/html; charset=UTF-8
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
date: Fri, 13 Nov 2026 12:13:05 GMT
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*
referrer-policy: same-origin
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=m8Lor5QJCHRrJGvygRY8MAxiN5GaA11YQ1oKxY8Cao1el90b1ow5iQQ8lHH7dfJnbNMOrdbU4dZltTwGib6CWyaQ5aGGyfKdXK4L6%2BKfP1FbB99ypmo3objDgq10NwQqPMWBTPSmJP9fhRWPF%2Bs%3D"}]}
server: cloudflare
server-timing: chlray;desc="a59db04429e8abe5"
set-cookie: __cf_bm=mu6HL3nIqobNxprsTNRUhTymR.Nt9GSup1SoEJLf0RI-1794571986.5838132-1.0.1.1-YtK4R2I2V6s9ecH6RjbEjaBpz3fQfSJkoQu3fMXzXjyK49JayarvpPE1bc8e0_B.iPBQIVafrEUOOQ4HoZKO_rVBFxziV_5ox7D7SBrtcIB1mAYciSU2.8byN0CX2.DS; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=coinbase.com; Expires=Fri, 13 Nov 2026 12:43:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGINDNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
- IPv4 Addresses (A)
- 104.18.35.15, 172.64.152.241
- IPv6 Addresses (AAAA)
- 2a06:98c1:3102::ac40:98f1, 2a06:98c1:310d::6812:230f
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), alt3.aspmx.l.google.com (Priority: 10), alt4.aspmx.l.google.com (Priority: 10)
- Authoritative Nameservers (NS)
- sam.ns.cloudflare.com, sue.ns.cloudflare.com
- TXT Records Found
- 44 TXT verification records
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
- Registrable Domain
- coinbase.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- sam.ns.cloudflare.com, sue.ns.cloudflare.com
- Registration Lifecycle
- Registered: 2011 → Expires: 2028
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
- SPF Record
- v=spf1 include:amazonses.com include:_spf.google.com -all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; adkim=s; aspf=s; fo=1; rua=mailto:jpohmdhp@ag.dmarcian.com; ruf=mailto:jpohmdhp@fr.dmarcian.com;
- DKIM Selectors Detected
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
- Root Domain Label
- coinbase
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- Official Domain (coinbase)
- Typosquatting Risk
- Clean
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
- HTML Title
- Just a moment...
- Meta Description
- —
- Document Language
- en-US
- Character Encoding
- UTF-8
- Viewport Setting
- width=device-width,initial-scale=1
- Generator Software
- —
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
- HTTP Response Time
- 90 ms
- Payload Body Size
- 5.5 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
94/100 — trusted. Long-established domain (15.4 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 15+ years ago; coinbase is the real brand's registered domain; no impersonation patterns detected. Minor issues: site returned HTTP 403; certificate expires soon (6 days).
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 60 characters verified
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 104.18.35.15
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://www.coinbase.com/
- Redirect Hop Count
- 1 hop
- 1.https://coinbase.com/ → https://www.coinbase.com/
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
- Certificate Authority (Issuer)
- C=US, O=Google Trust Services, CN=WE1
- Subject Common Name (CN)
- *.cde.coinbase.com
- Validity Period
- 6 days remaining (Expires: 2026-11-19T22:25:40Z)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 100 certs recorded
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
- Published Phone Numbers
- 1794571986-1.2.1.1, 1794571986, 1794571986-1.0.1.1
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.coinbase.com/sitemap-converter-index.xml, https://www.coinbase.com/sitemap-derivatives-index.xml, https://www.coinbase.com/sitemap-prediction-markets-index.xml, https://www.coinbase.com/sitemap-equities-index.xml, https://www.coinbase.com/sitemap-how-to-buy-index.xml, https://www.coinbase.com/sitemap-prices-index.xml, https://www.coinbase.com/sitemap-price-prediction-index.xml, https://www.coinbase.com/sitemap-staking-index.xml, https://www.coinbase.com/sitemap-careers.xml, https://www.coinbase.com/sitemap-learn.xml, https://www.coinbase.com/sitemap-bytes.xml, https://www.coinbase.com/sitemap-institutional.xml, https://www.coinbase.com/sitemap-blog.xml, https://www.coinbase.com/sitemap-marketing.xml, https://www.coinbase.com/sitemap-advanced.xml
- Disallow Rules Count
- 22 rules
View Raw robots.txt
# # # :$$$ # $II :III # III :III # :III # +ZZ+ ?ZZ~ +ZZZI :III ?I+ IZZ7 +ZZI IZZ~ # .7IIIIII ~IIIIIIII $II 7IIIIIIIII7 :IIIIIIIII$ IIIIIIIII7 7IIIIIII 77IIIIIII # ZIII. : ZIII III $II 7II IIII :III III7 I III: 7II. ZII, III. # III III III $II 7II III :III III= III III II: III # +III ZII, III $II 7II III :III III .Z$7IIIII ,III7 $II +Z$III # 7II+ $II 7II $II 7II III :III III ZIIII~ III ?IIIII $IIIIIIIIII: # ~III III= III $II 7II III :III III ZII III IIII III # III III ,III $II 7II III :III 7II 7II III III III # .III7 :$ ~III? ZIII $II 7II III :III $III =III III Z$ ~7III III7 7$ # IIIIII IIIIIII? $II 7II III :IIIIIIIII ,IIIIIIIIII IIIIIIII. IIIIIIII # # Bitcoin Made Easy - Coinbase is the simplest way to buy, use, and accept Bitcoin. # # https://www.coinbase.com/careers # User-Agent: facebookexternalhit Allow: / User-Agent: Twitterbot Allow: / User-Agent: LinkedInBot Allow: / User-Agent: WhatsApp Allow: / User-agent: Slackbot Allow: / User-agent: Discordbot Allow: / User-agent: AdsBot-Google Allow: / User-agent: AdsBot-Google-Mobile Allow: / User-Agent: * Disallow: /oauth/ Disallow: /*/oauth/ Disallow: /signup-interstitial Disallow: /*/signup-interstitial Disallow: /join/ Disallow: /*/join/ Disallow: /spot/* Disallow: /*/spot/* Disallow: /advanced-trade/spot/ Disallow: /*/advanced-trade/spot/ Disallow: /converter/*/*?currencyPage* Disallow: /*/converter/*/*?currencyPage* Disallow: /price/*?locale* Disallow: /*/price/*?locale* Disallow: /partner/ Disallow: /*/partner/ Disallow: /lp/ Disallow: /*/lp/ Disallow: /*/cookie-preferences Disallow: /*/*/cookie-preferences Disallow: /cookie-preferences Disallow: /*/cookie-preferences Allow: /.well-known/ Sitemap: https://www.coinbase.com/sitemap-converter-index.xml Sitemap: https://www.coinbase.com/sitemap-derivatives-index.xml Sitemap: https://www.coinbase.com/sitemap-prediction-markets-index.xml Sitemap: https://www.coinbase.com/sitemap-equities-index.xml Sitemap: https://www.coinbase.com/sitemap-how-to-buy-index.xml Sitemap: https://www.coinbase.com/sitemap-prices-index.xml Sitemap: https://www.coinbase.com/sitemap-price-prediction-index.xml Sitemap: https://www.coinbase.com/sitemap-staking-index.xml Sitemap: https://www.coinbase.com/sitemap-careers.xml Sitemap: https://www.coinbase.com/sitemap-learn.xml Sitemap: https://www.coinbase.com/sitemap-bytes.xml Sitemap: https://www.coinbase.com/sitemap-institutional.xml Sitemap: https://www.coinbase.com/sitemap-blog.xml Sitemap: https://www.coinbase.com/sitemap-marketing.xml Sitemap: https://www.coinbase.com/sitemap-advanced.xml
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
User reviews of coinbase.com
No reviews yet. Be the first to share your experience.