# coinhbesprologeein.wordpress.com — SUSPICIOUS

> coinhbesprologeein.wordpress.com was flagged for phishing attempts targeting Coinbase users. Avoid this domain as it is offline and unsafe.

## Summary
PhishDestroy identifies coinhbesprologeein.wordpress.com as a phishing site impersonating Coinbase Pro to steal user credentials. The page title and content mimic legitimate trading platform features to deceive visitors.

The domain was registered through Automattic Inc. and resolved to IP 192.0.78.13. Despite low detection rates with only 2 out of 95 security vendors flagging the site, it appeared on two security blocklists and was flagged by Google Safe Browsing for social engineering risks.

Currently, the domain is offline, reducing immediate risk. Users are advised to avoid interaction with this domain and verify URLs carefully when accessing financial platforms to prevent credential theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 410)
- Page title: Çoinbase Pro: Login – Çoinbase, you'll get access to advanced trading features, charting tools, and more.

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Automattic Inc.
- Country: US
- IP: 192.0.78.13
- IP Country: US
- IP City: San Francisco
- IP Org: AS2635 Automattic, Inc
- Nameservers: ["lb.wordpress.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Emsisoft", "Netcraft"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bb282-91f4-7728-b7f0-be947ab1c6a1.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/1d5d059b-76c3-4cb1-b8be-d4d1e831fa7b
- PhishDestroy: https://phishdestroy.io/domain/coinhbesprologeein.wordpress.com/
- LLM endpoint: https://phishdestroy.io/domain/coinhbesprologeein.wordpress.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinhbesprologeein.wordpress.com/
Last updated: 2026-03-19