932847-coinbase[.]com

The domain 932847-coinbase.com is a high-risk brand impersonation phishing domain targeting Coinbase users. It was registered through NiceNIC International Group Co., Limited on March 02, 2026, and is currently active with no SSL certificate. The page title, "Suspected phishing site | Cloudflare," suggests Cloudflare has already flagged it, but the domain remains operational. This is a classic example of typosquatting designed to trick users into entering credentials or sensitive information on a fake Coinbase login page.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports 13 out of 95 security vendors flagging this domain, and it appears on three security blocklists. Google Safe Browsing specifically flags it for phishing. The domain resolves to IP address 188.114.97.3. These data points confirm that this is an actively monitored threat with widespread recognition among security vendors.

As of the latest analysis, the domain remains active and poses a significant risk to anyone who might encounter it. No sinkholing or takedown actions have been reported. Users should avoid visiting this domain entirely, never enter credentials or personal information, and report any suspicious emails or messages directing them to it. For Coinbase users, enabling two-factor authentication and using official bookmarks or the official app are critical safety measures.