coinbase-secure-wallet.net

Why we flagged this

Matched across multiple trusted sources and community reports.

How this scam type works

From our Phishing & Smishing guide.

1. The hook. A text, email, or call claiming to be your bank, the post office, a tax authority, or a subscription service.
2. The urgency. 'Your account will be closed', 'package held at customs', 'unauthorized charge'. You have hours, not days.
3. The clone. A link to a page that looks identical to the real site but lives on a lookalike domain (amazn.com, paypaI.com, etc.).
4. The credential harvest. You log in. They capture everything — including your 2FA code in real time.
5. The drain. Within minutes, funds are moved, accounts locked, or personal data sold on.