receive[.]invoice-coinbase[.]com

This report analyzes the domain receive.invoice-coinbase.com, which is a cryptocurrency scam site impersonating the Coinbase brand. The site poses the threat of cryptocurrency theft by tricking users into believing they are interacting with a legitimate Coinbase invoice or payment portal, likely to harvest login credentials, private keys, or direct payments to attackers.

Technical evidence indicates significant malicious detection. VirusTotal reports a detection rate of 8 out of 95 security vendors, with flags from BitDefender, Certego, CRDF, ESET, and Fortinet. The domain is listed on 2 blocklists. It was created on 2026-02-21 and resolves to IP address 45.89.110.15, hosted in the Netherlands by AS209847 WorkTitans B.V. The SSL certificate is identified as E6. The GridinSoft trust rating is 0 out of 100, and the domain risk score is 63.

The site is currently down or offline. Based on the provided data, the risk level is high, as indicated by the low trust rating, high domain risk score, and multiple security vendor flags. The site should be considered a confirmed threat and blocked from all internal networks.