# coinbase.com-safety.help — MALICIOUS

> coinbase.com-safety.help is flagged for phishing risks. Avoid this domain to protect your data from potential scams and fraudulent activity.

## Summary
PhishDestroy identifies coinbase.com-safety.help as a medium-risk domain involved in generic phishing activities. This classification indicates a significant potential for deceptive attempts to steal personal or financial information by impersonating legitimate services.

Supporting this assessment, the domain was created recently on February 14, 2026, and is registered through Global Domain Group LLC. The domain resolves to IP address 188.114.97.3 and has been flagged by 7 out of 95 security vendors on VirusTotal, reinforcing concerns about its malicious intent and infrastructure setup.

Users should avoid interacting with coinbase.com-safety.help to mitigate exposure to phishing scams. PhishDestroy notes the domain remains active and recommends implementing domain-blocking measures and maintaining vigilance against suspicious emails or links referencing this domain.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Target brand: Coinbase
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-03-03 21:07:01
- Registrar: Global Domain Group LLC
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: doug.ns.cloudflare.com paislee.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "BitDefender", "CRDF", "CyRadar", "Emsisoft", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Netcraft", "Seclookup", "SOCRadar", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/XkxmXr5g/e593a796cd74.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/ba54e90d-48f8-4e60-ab8b-fd5e1951666c
- PhishDestroy: https://phishdestroy.io/domain/coinbase.com-safety.help/
- LLM endpoint: https://phishdestroy.io/domain/coinbase.com-safety.help/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbase.com-safety.help/
Last updated: 2026-03-19