# guide-coinbase--pro.pages.dev — MALICIOUS

> guide-coinbase--pro.pages.dev is a high-risk phishing domain impersonating Coinbase. Avoid interaction and report suspicious activity immediately.

## Summary
PhishDestroy identifies guide-coinbase--pro.pages.dev as a high-risk phishing domain impersonating the Coinbase brand. Such brand impersonation aims to deceive users into divulging sensitive information, posing severe security threats.

The domain was registered via Cloudflare, Inc. on February 21, 2026, and currently resolves to IP 172.66.44.139. It appeared on three security blocklists and was flagged by 13 out of 95 VirusTotal vendors before being taken offline. The page title indicated suspected phishing activity.

Users should avoid visiting this domain and refrain from providing any personal or financial data. Report any suspicious communications referencing Coinbase to official channels and maintain up-to-date security measures to mitigate phishing risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Coinbase
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.139
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["rohin.ns.cloudflare.com", "dorthy.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc44b-1711-7768-a005-a333e0211921.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/c3ec3875-4e70-4e74-830f-1ba9e65a2fb1
- PhishDestroy: https://phishdestroy.io/domain/guide-coinbase--pro.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/guide-coinbase--pro.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/guide-coinbase--pro.pages.dev/
Last updated: 2026-03-19