# coinbase.ticket409325.com — MALICIOUS

> coinbase.ticket409325.com is under investigation for phishing risks. Stay cautious and avoid sharing personal info until verified safe.

## Summary
PhishDestroy identifies coinbase.ticket409325.com as a suspicious domain potentially involved in generic phishing. It was registered recently on February 4, 2026, which raises initial concern.

The domain resolves to IP 64.89.161.118 and is registered through NameSilo, LLC. Despite no detections on VirusTotal, its unusual subdomain structure and fresh registration date warrant caution.

Currently marked active and under investigation, users are advised to avoid interaction with this site until more definitive safety information is available.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Target brand: Coinbase
- Page title: Google

## Domain Intelligence
- Registered: 2026-03-07 19:07:02
- Registrar: NameSilo, LLC
- Country: US
- IP: 64.89.161.118
- IP Country: LU
- IP City: Luxembourg
- IP Org: AS205759 Ghosty Networks LLC
- Nameservers: ["ns71.cloudns.net", "ns72.cloudns.com", "ns73.cloudns.net"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 8 vendors flagged
  Vendors: ["ADMINUSLabs", "CRDF", "CyRadar", "Emsisoft", "Fortinet", "Google Safebrowsing", "Netcraft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/Q7Gt3tC3/1c9810754292.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/4076f227-d5ea-4a78-b259-2bda48af225c
- Wayback Machine: https://web.archive.org/web/https://coinbase.ticket409325.com
- PhishDestroy: https://phishdestroy.io/domain/coinbase.ticket409325.com/
- LLM endpoint: https://phishdestroy.io/domain/coinbase.ticket409325.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbase.ticket409325.com/
Last updated: 2026-03-19