# 803318coinbase.com — SUSPICIOUS

> Beware of 803318coinbase.com, a phishing site targeting Coinbase users. Avoid inputting personal data and report suspicious activity immediately.

## Summary
PhishDestroy identifies 803318coinbase.com as an active phishing domain impersonating Coinbase to steal user credentials. This medium-risk threat aims to deceive users into disclosing sensitive information.

The domain was created recently on March 2, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 188.114.96.3 and has been flagged by 6 out of 95 security vendors on VirusTotal, indicating potential malicious activity.

Users should avoid accessing 803318coinbase.com and never enter login or personal details on this site. Report any suspicious emails or links referencing this domain and rely on official Coinbase channels for account management.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Coinbase
- Page title: Sign in

## Domain Intelligence
- Registered: 2026-03-06 17:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: brodie.ns.cloudflare.com paige.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["ADMINUSLabs", "Kaspersky"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/0y5pNDZ2/4c6f00d193d0.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/803318coinbase.com
- Wayback Machine: https://web.archive.org/web/https://803318coinbase.com
- PhishDestroy: https://phishdestroy.io/domain/803318coinbase.com/
- LLM endpoint: https://phishdestroy.io/domain/803318coinbase.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/803318coinbase.com/
Last updated: 2026-03-19