coinbase-commerce[.]me

PhishDestroy first observed coinbase-commerce.me on Sep 4, 2026. The hostname explicitly references Coinbase; stored content metadata identifies the same apparent target. The captured page title is “404 — Страница не найдена”. Current evidence score: 77/100 (critical).

One source contains a positive finding: VirusTotal. VirusTotal recorded 9 detections among 90 engines: alphaMountain.ai, CRDF, ESET, Fortinet, Kaspersky, LevelBlue, Lionic, Sophos, Webroot on Sep 4, 2026 at 22:48 UTC. Non-positive and contextual checks: AlienVault OTX listed 2 community pulse references (not vendor detections) on Sep 5, 2026 at 00:03 UTC. The separate external-blocklist snapshot contained no matches on Sep 4, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Sep 5, 2026 at 00:02 UTC. URLScan completed without a malicious verdict (score 0) on Sep 4, 2026 at 23:08 UTC.

HTTP 502 server error was recorded on Sep 4, 2026 at 22:00 UTC. At collection time, the hostname resolved to 172.67.178.67. The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 1 visual capture from PhishDestroy. TLS metadata lists WE1 as the certificate issuer.

Stored content provides classification context, but only one source contains a positive finding. The target field identifies Coinbase, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.