# coinbase.com-en.info — SUSPICIOUS

> coinbase.com-en.info mimics Coinbase to steal credentials. This domain, flagged by 4/95 security vendors, could harvest sensitive data.

## Summary
coinbase.com-en.info poses as the cryptocurrency exchange Coinbase to trick users into entering login credentials. Attackers may harvest these details for account takeovers or fraud.  This domain was flagged by 4 of 95 security vendors on VirusTotal. It resolved to IP 45.151.91.170 and used a Let's Encrypt SSL certificate. The domain is likely recent, offering threat actors a short-lived window to exploit unsuspecting users.  If you visited this site, cease interaction immediately. Disable saved browser passwords and revoke any Coinbase sessions. Monitor accounts for suspicious activity and report the domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Coinbase

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 45.151.91.170

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/01e3804c-52f3-4626-9f17-9ee6fcd7c45d
- PhishDestroy: https://phishdestroy.io/domain/coinbase.com-en.info/
- LLM endpoint: https://phishdestroy.io/domain/coinbase.com-en.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbase.com-en.info/
Last updated: 2026-03-20