Coinbase wallet

https://cnb-ex.sdhsged.workers.dev/recovery.html

Case summary

The target, observed result, and important findings.

Status
Current evaluation: Limited evidence: interaction stalled
Findings: 4Critical
Impersonated brand: CoinbaseOther cases impersonating Coinbase Search for this value.
Submitted URL: https://cnb-ex.sdhsged.workers.dev/ Search for this value.
Effective URL: https://cnb-ex.sdhsged.workers.dev/recovery.html Search for this value.
Domain registration: workers.devMore than 90 days oldRegistered 2019-02-08 · Registrar CloudFlare, Inc.
Language: Detecting...
Network: 65 requests across 11 hosts
Cookies: 15 observed
Favicon: 9d5a7f95…f1851081 Search for this value.
Infrastructure: Loading...
Behavior: 3 recorded events
Interaction: 6 actions · 1 submission · stopped: repeated state · download stage: no payload control
1. clicksucceededCloudflare Turnstile checkbox
2. clicksucceededIgnore & Proceed
3. clicksucceededLogin to Coinbase
4. clicksucceededLogin to Coinbase [dispatched]
5. fillsucceededselect | | |
6. submitsucceededEnter on select | | |

How and when the analysis ran.

Detected findings grouped by risk

Network requests grouped by resource type

Recorded actions grouped by type

Requests to the most active hosts

First-party and third-party requests

Network responses grouped by MIME type