# www.coinbee.icu — SUSPICIOUS

> Coinbee.icu shows low-risk phishing signs. Users should avoid sharing sensitive info and verify site legitimacy before use.

## Summary
PhishDestroy identifies www.coinbee.icu as a domain associated with generic phishing activities, classified under a low-risk threat level. The domain was registered recently on February 21, 2026, which is often a common characteristic of phishing sites attempting to exploit new or unestablished web properties. Given the classification and nature of phishing, users are advised to exercise caution when interacting with this domain.

Technically, www.coinbee.icu resolves to the IP address 172.67.178.54 and is registered via NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal analysis indicates that 2 out of 95 security vendors flagged this domain, suggesting some level of suspicion but not a broad consensus on its maliciousness. The use of an .icu top-level domain, which is often favored by threat actors for its low cost and loose registration policies, combined with limited but present detection, supports the phishing assessment.

Currently, the domain remains active and continues to pose a potential threat. Users are strongly recommended to avoid submitting any personal, financial, or login information on this site until further security validations can be performed. PhishDestroy advises monitoring this domain for updates and encourages the use of established security tools to detect and block interactions with suspicious websites like www.coinbee.icu.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: Buy Gift Cards with Crypto - Coinsbee

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: HK
- IP: 172.67.178.54
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: norman.ns.cloudflare.com zariyah.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Kaspersky"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf3b-d7f0-738c-8001-d07fae608782.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/www.coinbee.icu
- Wayback Machine: https://web.archive.org/web/https://www.coinbee.icu
- PhishDestroy: https://phishdestroy.io/domain/www.coinbee.icu/
- LLM endpoint: https://phishdestroy.io/domain/www.coinbee.icu/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.coinbee.icu/
Last updated: 2026-03-16