# 591237coinbase.com — SUSPICIOUS

> 591237coinbase.com impersonates Coinbase to steal data. Domain now offline but stay alert. Learn how to protect yourself from this phishing threat.

## Summary
PhishDestroy identifies 591237coinbase.com as a low-risk brand impersonation phishing domain targeting Coinbase users. The site mimicked Coinbase's platform to lure victims into divulging sensitive information, posing a risk to user security and trust.

The domain 591237coinbase.com was registered on March 4, 2026, through NiceNIC International Group Co., Limited. It appeared on one security blocklist and was flagged by 2 out of 95 VirusTotal security vendors. The domain resolved to IP address 172.67.185.106 but is currently taken offline, mitigating immediate risk.

Users should remain vigilant and avoid interacting with suspicious URLs resembling trusted services like Coinbase. Always verify website URLs carefully and use official platforms for cryptocurrency transactions. If you encounter or suspect phishing attempts from similar domains, report them to security teams or platforms like PhishDestroy.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Coinbase
- Page title: Coinbase - Buy and Sell Bitcoin, Ethereum, and more with trust

## Domain Intelligence
- Registered: 2026-03-04 17:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.185.106
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb9a5-b335-71a9-a6b2-27be8bce2def.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/591237coinbase.com
- PhishDestroy: https://phishdestroy.io/domain/591237coinbase.com/
- LLM endpoint: https://phishdestroy.io/domain/591237coinbase.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/591237coinbase.com/
Last updated: 2026-03-19