# cbgeo-coinbase.com — MALICIOUS

> cbgeo-coinbase.com poses medium phishing risks with active status. Stay alert and protect your data from potential scams involving this domain.

## Summary
PhishDestroy identifies cbgeo-coinbase.com as an active phishing domain designed to impersonate legitimate Coinbase services. Such phishing attempts can lead to credential theft and financial fraud, posing significant risks to users who may unknowingly disclose sensitive information.

This domain was registered on March 3, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to IP address 91.92.241.15. Although only a small number of security vendors on VirusTotal have flagged this domain, its recent creation date combined with the suspicious registrar and active status suggests ongoing malicious activity targeting cryptocurrency users.

Users are advised to remain vigilant by avoiding any interaction with emails or links referencing cbgeo-coinbase.com. They should verify official Coinbase URLs carefully and enable multi-factor authentication on their accounts to mitigate potential fraud. Reporting suspicious communications to security teams or platforms like PhishDestroy can further help contain this threat.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Target brand: Coinbase
- Page title: Checking Connection - Please Wait

## Domain Intelligence
- Registered: 2026-03-03 23:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 91.92.241.15
- IP Country: NL
- IP City: Amsterdam
- IP Org: AS202412 Omegatech LTD
- Nameservers: ns1.virtualine.org ns2.virtualine.org
- SSL Issuer: none

## Detection Status
- VirusTotal: 8 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "CyRadar", "Fortinet", "G-Data", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/DNNVGgQ/daa08b2ca849.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/0830cc17-d676-48b6-867f-525387ec2258
- PhishDestroy: https://phishdestroy.io/domain/cbgeo-coinbase.com/
- LLM endpoint: https://phishdestroy.io/domain/cbgeo-coinbase.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cbgeo-coinbase.com/
Last updated: 2026-03-19