# aid.rnqgejxzdd.yoga — MALICIOUS

> aid.rnqgejxzdd.yoga is an active phishing site targeting Coinbase users. Stay alert and avoid interaction with this domain to protect your data.

## Summary
PhishDestroy identifies aid.rnqgejxzdd.yoga as a high-risk phishing domain impersonating Coinbase to steal sensitive user information. This site poses a significant threat to anyone who visits it.

The phishing attack works by presenting a fake Coinbase login page, tricking users into submitting their credentials. The domain, newly created in July 2025 and flagged by multiple blocklists and security vendors, is designed to deceive and harvest account details.

If you have accessed this site, immediately change your Coinbase password and enable two-factor authentication. Monitor your accounts for suspicious activity and report any unauthorized transactions to Coinbase support.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: Coinbase

## Domain Intelligence
- Registered: 2025-07-29 01:44:40
- Registrar: NameSilo, LLC
- Country: US
- IP: 45.204.218.213
- Nameservers: ["becky.ns.cloudflare.com", "conrad.ns.cloudflare.com"]
- SSL Issuer: R12

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Seclookup", "Sophos", "Trustwave", "VIPRE"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a1e8f-6088-7445-96fb-39759bf42aaa.png
- PhishDestroy: https://phishdestroy.io/domain/aid.rnqgejxzdd.yoga/
- LLM endpoint: https://phishdestroy.io/domain/aid.rnqgejxzdd.yoga/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aid.rnqgejxzdd.yoga/
Last updated: 2026-03-19