# coinbas-eng.pages.dev — MALICIOUS

> coinbas-eng.pages.dev is flagged for high-risk phishing activity. Stay protected—learn more and avoid this unsafe domain now.

## Summary
PhishDestroy identifies coinbas-eng.pages.dev as a high-risk generic phishing domain targeting unsuspecting users. The domain mimics legitimate cryptocurrency services to deceive victims into divulging sensitive information. Due to its social engineering tactics, this domain poses a significant threat to online security and user privacy.

Technically, coinbas-eng.pages.dev was registered on February 21, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.44.94. It has been flagged by Google Safe Browsing under the category of social engineering and appears on three separate security blocklists. Additionally, 13 out of 95 security vendors on VirusTotal have detected malicious activity associated with this domain, confirming its involvement in phishing operations.

Currently, the domain coinbas-eng.pages.dev has been taken offline, mitigating immediate risk to users. PhishDestroy strongly recommends users remain vigilant and avoid interacting with suspicious domains, especially those impersonating well-known financial platforms. Continuous monitoring and reporting of similar threats help enhance collective cybersecurity defenses.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.94
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["ines.ns.cloudflare.com", "carl.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a8e2e-fe55-771a-ae39-820b26fad1b4.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e8ebeba4-dc21-4069-81ab-b01b8532f504
- PhishDestroy: https://phishdestroy.io/domain/coinbas-eng.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/coinbas-eng.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbas-eng.pages.dev/
Last updated: 2026-03-19