# admin.coinbasew.mobi — MALICIOUS

> Beware of admin.coinbasew.mobi, a phishing site flagged for social engineering. Avoid entering credentials to protect your Coinbase account.

## Summary
PhishDestroy has identified admin.coinbasew.mobi as an active phishing domain targeting users by mimicking Coinbase's official administration portal. This generic phishing threat aims to deceive individuals into divulging sensitive login credentials, potentially leading to unauthorized access and financial loss. The presence of social engineering tactics highlights the need for vigilance when interacting with cryptocurrency-related platforms.

The domain admin.coinbasew.mobi resolves to IP address 134.122.152.231 and is flagged by Google Safe Browsing for social engineering activities, indicating it is designed to trick users. Additionally, VirusTotal detects the domain as malicious with 4 out of 95 security vendors marking it suspicious, underscoring its risk. The use of a .mobi top-level domain and the subtle misspelling of the legitimate Coinbase brand name suggest an attempt to evade detection and lure unsuspecting victims.

Users are strongly advised to avoid clicking on links or entering any personal information on admin.coinbasew.mobi. Always verify URLs carefully and access Coinbase accounts through official channels only. Employing multi-factor authentication and keeping security software up to date can further reduce risk. If you suspect you have interacted with this phishing site, promptly change your passwords and monitor accounts for unauthorized activity.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Target brand: Coinbase
- Page title: 后台管理系统

## Domain Intelligence
- Registered: 2026-03-10 13:07:01
- Registrar: REGISTRAR_NOT_FOUND
- IP: 134.122.152.231
- Nameservers: NS_NOT_FOUND

## Detection Status
- VirusTotal: 11 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CRDF", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Sophos", "alphaMountain.ai"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content

### Page Text
后台管理系统 后台管理系统 记住密码 登 录 清空 确定

### Form Fields
- button
- 账号
- 密码
- 验证码
- password
- 谷歌验证码
- text
- checkbox

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd7a2-bf3c-778e-b47b-a676889cd349.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/94bddb00-e4da-4a68-a51f-c033b0c9ce92
- PhishDestroy: https://phishdestroy.io/domain/admin.coinbasew.mobi/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/admin.coinbasew.mobi/
Last updated: 2026-03-14