# webmail.283776coinbase.com — MALICIOUS

> webmail.283776coinbase.com is flagged as malicious by PhishDestroy threat intelligence.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 526)
- Target brand: Coinbase

## Domain Intelligence
- Registered: 2026-03-26 01:14:02
- Registrar: Sav.com, LLC
- IP: 20.169.249.163
- Nameservers: cheryl.ns.cloudflare.com logan.ns.cloudflare.com

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019d2f7a-0023-7154-8b35-b6bce8ae6b5a.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/180d848a-64c4-40d8-9fe6-43a557c25c50
- PhishDestroy: https://phishdestroy.io/domain/webmail.283776coinbase.com/
- LLM endpoint: https://phishdestroy.io/domain/webmail.283776coinbase.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/webmail.283776coinbase.com/
Last updated: 2026-03-28