# coinbase.com.dashboard-payment.link — SUSPICIOUS

> coinbase.com.dashboard-payment.link mimics Coinbase to steal credentials; resolves to IP 188.114.96.3 since March 31, 2026.

## Summary
PhishDestroy identifies coinbase.com.dashboard-payment.link as an active brand impersonation domain targeting Coinbase users and posing as a payment dashboard.

This domain was flagged by PhishDestroy on seed 259715 for exact-match brand impersonation of Coinbase. Technical indicators include a VirusTotal score of 0/95 detections, registration via Key-Systems LLC, hosting on IP 188.114.96.3, and a recently created SSL certificate issued by SSL Corporation on March 31, 2026. The domain remains unblocked by Google Safe Browsing and has not been listed on major threat blocklists at this time.

The domain is currently under active investigation with a status of 'active' and 'under_investigation'. No drainer kit artifacts have been confirmed yet, but the high-risk brand impersonation pattern suggests immediate credential theft intent. Users are advised to avoid visiting the site, report it to Coinbase and relevant authorities, and block both the domain and IP at the network level. Remaining risk is assessed as elevated due to low detection coverage and plausible deniability via SSL certification.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Coinbase

## Domain Intelligence
- Registered: 2026-03-31 17:18:39
- Registrar: Key-Systems, LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3d67d80c-117f-44e9-bf6d-5d1ebb9f5928
- PhishDestroy: https://phishdestroy.io/domain/coinbase.com.dashboard-payment.link/
- LLM endpoint: https://phishdestroy.io/domain/coinbase.com.dashboard-payment.link/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbase.com.dashboard-payment.link/
Last updated: 2026-03-31