# com-coinbase-home.pages.dev — MALICIOUS

> Stay safe from phishing. The domain com-coinbase-home.pages.dev impersonates Coinbase and is flagged for social engineering. Avoid interaction.

## Summary
PhishDestroy identifies com-coinbase-home.pages.dev as a high-risk brand impersonation threat targeting Coinbase users. This domain was created on February 21, 2026, and employed deceptive tactics to lure victims.

The domain resolves to IP 172.66.44.110 and is registered through Cloudflare, Inc. VirusTotal detected 13 flags among 95 security vendors, and Google Safe Browsing classified it under social engineering. It also appears on three security blocklists, indicating widespread recognition of its malicious intent.

Currently, the domain is offline, preventing further harm. Users are advised to remain vigilant, avoid clicking suspicious links, and verify URLs directly through official Coinbase channels. PhishDestroy continues monitoring similar threats to protect the community.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Coinbase
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.110
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["vera.ns.cloudflare.com", "dion.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cccd9-3c27-77e5-b26f-31684b87384d.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/0a64b073-ad8c-459e-ae51-2cf11fd87690
- PhishDestroy: https://phishdestroy.io/domain/com-coinbase-home.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/com-coinbase-home.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/com-coinbase-home.pages.dev/
Last updated: 2026-03-19