# m.cponbase.com — SUSPICIOUS

> m.cponbase.com mimics Coinbase to trick users. This domain is offline now. Avoid sharing credentials and always verify site authenticity.

## Summary
PhishDestroy identifies m.cponbase.com as a brand impersonation phishing domain targeting Coinbase users. Such threats are designed to deceive visitors into believing they are on a legitimate platform to steal sensitive information like login credentials. Although the risk level is assessed as low, users should remain vigilant since even low-risk phishing attempts can lead to fraud or identity theft.

The domain m.cponbase.com was registered on February 21, 2026, via Cosmotown, Inc. It resolved to the IP address 34.111.46.214. The site closely mimicked Coinbase’s branding with a page title "Coinbase - Buy and Sell Bitcoin, Ethereum, and more with trust." PhishDestroy noted the domain scored a 0/100 trust rating from Gridinsoft, appeared on two security blocklists, and was flagged by 1 out of 95 security vendors on VirusTotal. Importantly, this domain has been taken offline, reducing immediate risk.

Users should avoid interacting with m.cponbase.com and refrain from entering any personal or financial information. Always verify URLs when accessing cryptocurrency platforms by typing the official address directly or using trusted bookmarks. Employ updated security software and utilize multi-factor authentication on Coinbase accounts to minimize potential impact from similar phishing attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 404)
- Target brand: Coinbase
- Page title: Coinbase - Buy and Sell Bitcoin, Ethereum, and more with trust

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Expires: 2026-08-08 00:00:00
- Registrar: Cosmotown, Inc.
- Country: US
- IP: 34.111.46.214
- IP Country: US
- IP City: Kansas City
- IP Org: AS396982 Google LLC
- Nameservers: ["ns1.adtraks.com", "ns2.adtraks.com"]
- SSL Issuer: Let's Encrypt / R3

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/w8FxTyS/1d987fc6494e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/339c1a6d-8786-4a80-bc6c-614349b14aa1
- Wayback Machine: https://web.archive.org/web/https://m.cponbase.com
- PhishDestroy: https://phishdestroy.io/domain/m.cponbase.com/
- LLM endpoint: https://phishdestroy.io/domain/m.cponbase.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/m.cponbase.com/
Last updated: 2026-03-19