1nmlkjihgfedcb2[.]am[.]coinbase[.]cm

This domain poses an elevated risk as a brand impersonation threat specifically targeting Coinbase users. It was designed to trick visitors into believing they are on the legitimate Coinbase website, likely to steal login credentials or cryptocurrency funds through a fake login page.

The domain 1nmlkjihgfedcb2.am.coinbase.cm was created on May 12, 2025, and registered through Netcom.cm Sarl. It resolves to IP address 104.18.35.15 and has no SSL certificate, a major red flag. VirusTotal shows 3 out of 95 security vendors flagging this domain as malicious, and it appears on one security blocklist. The page title is "Coinbase - Buy and Sell Bitcoin, Ethereum, and more with trust," which mimics the official Coinbase branding. The domain is currently offline, but users may have encountered it while active.

To stay safe, never enter your Coinbase credentials or personal information on any site accessed through unsolicited links. Always type the official URL directly into your browser. If you have already visited this domain, change your Coinbase password immediately and enable two-factor authentication. Report any suspicious domains to PhishDestroy and the legitimate company (Coinbase) so they can take further action. Use a reputable password manager and consider running a security scan on your device if you interacted with the site.