nebkjm[.]coinbase[.]earth

The domain nebkjm.Coinbase.earth is identified as a phishing site that impersonated the reputable cryptocurrency exchange, Coinbase. With a VirusTotal score of 3/95, the domain represents a significant risk for users looking to access legitimate services, as it tries to deceive individuals into sharing sensitive information.

Registered through Porkbun and active for 486 days, this domain was flagged across multiple blocklists, indicating its malicious intent. The IP address 199.59.243.228 was associated with shared hosting, which is often utilized by threat actors to manage numerous phishing sites. Its prolonged lifespan in the wild raises concerns about its operation and potential user impact.

PhishDestroy has successfully taken down nebkjm.coinbase.earth, with ongoing monitoring to prevent any re-emergence. The domain's status is currently marked as dead, reflecting the efforts in mitigating its threat to users and protecting the Coinbase brand from further impersonation attempts.