{Warning}: Fake Coinbase website

[Baofeng]

There is a new fake and clone Coinbase website, I'm just giving out a warning specially for newbies. Using the old but still effective Homograph attack.

Website:

Code:

www.xn--conbase-sfb.com

Archived: http://archive.is/P7dAW

Which will redirect you to: coınbase.com (do not click)



Whois info:

https://whois.domaintools.com/xn--conbase-sfb.com

Coınbase.com
Whois Record for Coınbase.com
 Domain Profile
Registrant   WhoisGuard Protected
Registrant Org   WhoisGuard, Inc.
Registrant Country   pa
Registrar   NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status   addPeriod, clientTransferProhibited
Dates   2 days old
Created on 2020-08-05
Expires on 2021-08-05
Updated on 0000-12-31     
Name Servers   DNS1.REGISTRAR-SERVERS.COM (has 6,373,289 domains)
DNS2.REGISTRAR-SERVERS.COM (has 6,373,289 domains)
  
Tech Contact   WhoisGuard Protected
WhoisGuard, Inc.
P.O. Box 0823-03411,
Panama, Panama, pa

(p) (f)
IP Address   162.213.251.182 - 341 other sites hosted on this server
  
IP Location   United States Of America - Georgia - Atlanta - Namecheap Inc.
ASN   United States Of America AS22612 NAMECHEAP-NET, US (registered Jun 21, 2011)
Domain Status   Registered And No Website
IP History   19 changes on 19 unique IP addresses over 3 years     
Registrar History   2 registrars with 1 drop     
Hosting History   5 changes on 4 unique name servers over 3 years     
 Website
Website Title   None given.     
Whois Record ( last updated on 2020-08-07 )
Domain name: xn--conbase-sfb.com
Registry Domain ID: 2551013777_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2020-08-05T18:01:25.00Z
Registrar Registration Expiration Date: 2021-08-05T18:01:25.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.6613102107
Reseller: NAMECHEAP INC

[jossiel]

Thanks for the warning.

Fake apps and websites copying website will be rampant due to the current news that's coming out from Coinbase. They are trending as they are planning to do many things with their platforms. From listings of upcoming altcoins to listing to the stock market.

It can fake out those newbies that have no idea which is the legit website and app of theirs.

[sheenshane]

It's a nice spot, thank you for the warning.

I think lazy newbies that didn't know how to verify the legitimacy of the site will always fall to this kind of trap.
Anyway, have you already reported this to the Coinbase Reporting phishing sites

Coinsbase itself already aware of this kind of tricks by scammers, to avoid being phished this might worth reading, "What is phishing?".

[daneal stev]

First, I want to thank you for this important warning. Frankly, we are now in a time that contains many fake sites that impersonate and place official and reliable sites and unfortunately there are many beginners who cannot distinguish between a fake and real site and for this reason they are hacked I have encountered many sites. Among these sites is the site for the blockchain wallet, but it is good that I was able to discover it, so I hope everyone will pay attention to this matter and take caution as much as possible

[ScamViruS]

Thank you OP for your warning. This post will prevent many newbies from falling into the trap of such scams. Because scammer's main target is to trap newbies. And many times they become successful.

So newbies will be alert because of your warning. Now every day different types of scam websites are coming up. Scammers are working hard to present themselves as credible. This is because people are now more aware that scammers are creating websites with different ideas.

[20kevin20]

I think we need a sticky thread on this board to inform newcomers about false and malicious ads. There are too many out there for all to be spotted - there were a few "how to avoid phishing websites" threads popping up here every now and then and I guess a thread to cover most, if not all, ways to avoid them is much better and more helpful than 1 thread for each false site/app.

[dondonk]

We must be observant in reading the name of the website in order to avoid attempts at homograph attacks. when compared to the original web there are differences in design. but generally using the same color and may be difficult to distinguish for beginners. Thank you for the information .

[Maus0728]

I think we need a sticky thread on this board to inform newcomers about false and malicious ads. There are too many out there for all to be spotted - there were a few "how to avoid phishing websites" threads popping up here every now and then and I guess a thread to cover most, if not all, ways to avoid them is much better and more helpful than 1 thread for each false site/app.

Actually, there is a huge list of scam website created by @examplens but it was last updated 2 month ago.
[1] [SCAM ALERT] List 220+ scam websites (Updated 01.June)
I wonder if reporting these website to google are really effective or it's just a waste of time. I have read an old post that these reported sites still remain on google search.

[examplens]

I think we need a sticky thread on this board to inform newcomers about false and malicious ads. There are too many out there for all to be spotted - there were a few "how to avoid phishing websites" threads popping up here every now and then and I guess a thread to cover most, if not all, ways to avoid them is much better and more helpful than 1 thread for each false site/app.

Actually, there is a huge list of scam website created by @examplens but it was last updated 2 month ago.
[1] [SCAM ALERT] List 220+ scam websites (Updated 01.June)
I wonder if reporting these website to google are really effective or it's just a waste of time. I have read an old post that these reported sites still remain on google search.

These websites and domains are problematic in several ways. there can even be found some quite good domain names, scammers after exhausting the possibility of making money through it, he can offer these domains to sell. some unfortunate buyer can buy a blacklisted domain and introduce his business to the problem from the beginning.

I had some health issues, so I didn't really have time to update this list even if I have a lot of new scam websites on my list. I'll expand the list these days, I hope. 

[Jating]

I think we need a sticky thread on this board to inform newcomers about false and malicious ads. There are too many out there for all to be spotted - there were a few "how to avoid phishing websites" threads popping up here every now and then and I guess a thread to cover most, if not all, ways to avoid them is much better and more helpful than 1 thread for each false site/app.

Actually, there is a huge list of scam website created by @examplens but it was last updated 2 month ago.
[1] [SCAM ALERT] List 220+ scam websites (Updated 01.June)
I wonder if reporting these website to google are really effective or it's just a waste of time. I have read an old post that these reported sites still remain on google search.

I don't think it's a waste of time, it's better to report them so that Google will take notice, otherwise they won't block the site on their platform.

The problem is that they are really slow in reacting to such reports, unless the reports coming are many and maybe they will take actions about it.

I reported it to Google/Namecheap, let's see how it goes.

[DdmrDdmr]

The site seems to be "empty" now (at least, all I get now is a blank "Index Of" type page). I don’t know if the OP knows how this fake site tried to spread (i.e. Add, Twitter, facebook, link on articles, etc.). This would always be an interesting piece of information, since it would pinpoint the access route, and that is valuable information to train people’s awareness and vivid eye detection.

[20kevin20]

Actually, there is a huge list of scam website created by @examplens but it was last updated 2 month ago.
[1] [SCAM ALERT] List 220+ scam websites (Updated 01.June)
I wonder if reporting these website to google are really effective or it's just a waste of time. I have read an old post that these reported sites still remain on google search.

That thread, along with a scam avoidance guide, would do great as a sticky imo.

I mostly don't even bother doing anything for Google anymore. I honestly sometimes really wish they'd get flooded by cyberthieves just so that a larger number of people finally decide to abolish it.

[coupable]

I don't think it's a waste of time, it's better to report them so that Google will take notice, otherwise they won't block the site on their platform.

Already reported using googlesafebrowsing and send a link of this thread to the coinbase help center using the chat-bot.

I would also like to mention here that according to dnstwister, there are already 168 domains similar to coinbase official domain. Check this link: https://dnstwister.report/search?ed=636f696e626173652e636f6d

[Baofeng]

Ok, it seems that the websites has been blocked already:

on Firefox:



On Chrome, (I have EAL installed)



On Opera/Brave:



On Safari:



Good job to those who have reported it.