# loggin-coin-base-eng.pages.dev — MALICIOUS

> loggin-coin-base-eng.pages.dev is a phishing domain impersonating Coinbase. Stay vigilant and avoid this site to protect your credentials.

## Summary
PhishDestroy identifies loggin-coin-base-eng.pages.dev as a high-risk phishing domain primarily engaged in brand impersonation targeting the cryptocurrency platform Coinbase. The classification is supported by its page title and content designed to deceive users into believing they are interacting with the legitimate service.

Technically, this domain resolved to IP address 172.66.44.230 and was registered through Cloudflare, Inc. Created recently on February 21, 2026, it triggered Google Safe Browsing flags for social engineering and appeared on multiple security blocklists. VirusTotal analysis indicated that 14 out of 95 security vendors flagged this domain for malicious activity, consistent with a phishing threat profile.

Currently, the domain is offline, reflecting active takedown efforts. PhishDestroy recommends continued monitoring for similar domains exploiting the Coinbase brand. Users are advised to exercise caution and avoid providing sensitive information to suspicious sites mimicking trusted financial platforms.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Coinbase
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.230
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["roman.ns.cloudflare.com", "angela.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a9c75-f810-76bc-a4ec-4a1bb331309f.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/fce13a5e-6981-462f-92b5-8a802f3fd599
- PhishDestroy: https://phishdestroy.io/domain/loggin-coin-base-eng.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/loggin-coin-base-eng.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/loggin-coin-base-eng.pages.dev/
Last updated: 2026-03-19