Found via IP pivot from www.fraud-getarculus.com

Indicator trez-coinbase.com Type domain Category SEO Poisoning Confidence medium VT Score 19/94 Source urlscan First Seen 2026-05-01 16:00:38 UTC Last Seen 2026-05-02 00:00:33 UTC urlscan View scan result ↗
Raw JSON
{
  "task": {
    "visibility": "public",
    "method": "automatic",
    "domain": "trez-coinbase.com",
    "apexDomain": "trez-coinbase.com",
    "time": "2026-04-30T21:26:17.396Z",
    "source": "certstream-suspicious",
    "uuid": "019de048-f3cf-7258-834e-5b187e251f40",
    "url": "https://trez-coinbase.com/"
  },
  "stats": {
    "uniqIPs": 2,
    "uniqCountries": 1,
    "dataLength": 63391,
    "encodedDataLength": 17170,
    "requests": 1
  },
  "page": {
    "country": "US",
    "server": "nginx/1.26.3 (Ubuntu)",
    "redirected": "same-domain",
    "ip": "64.95.12.204",
    "apexDomainAgeDays": 0,
    "language": "en",
    "mimeType": "text/html",
    "title": "Coinbase - Sign in",
    "url": "https://trez-coinbase.com/login",
    "tlsValidDays": 89,
    "tlsAgeDays": 0,
    "domainAgeDays": 0,
    "tlsValidFrom": "2026-04-30T20:26:06.000Z",
    "domain": "trez-coinbase.com",
    "apexDomain": "trez-coinbase.com",
    "asnname": "BLNWX - BL Networks, US",
    "asn": "AS399629",
    "tlsIssuer": "E8",
    "status": "200"
  },
  "_id": "019de048-f3cf-7258-834e-5b187e251f40",
  "_score": null,
  "sort": [
    1777584377396,
    "019de048-f3cf-7258-834e-5b187e251f40"
  ],
  "result": "https://urlscan.io/api/v1/result/019de048-f3cf-7258-834e-5b187e251f40/",
  "screenshot": "https://urlscan.io/screenshots/019de048-f3cf-7258-834e-5b187e251f40.png"
}