coinbaseqianbao[.]com[.]cn

PhishDestroy has identified coinbaseqianbao.com.cn as a confirmed phishing domain that specifically impersonates the Coinbase cryptocurrency platform. This domain, now taken offline, was designed to deceive users into believing it was a legitimate Coinbase wallet service, as indicated by its page title referencing 'COINBASE钱包' (Coinbase wallet in Chinese) and '安全数字货币支付工具' (secure digital currency payment tool). The site posed an elevated risk to cryptocurrency users, particularly those seeking Coinbase services in Chinese-language markets.

Technical indicators paint a clear picture of malicious intent. The domain was flagged by 3 out of 95 security vendors on VirusTotal and appeared on three separate security blocklists. It was registered through Web Commerce Communications Limited and resolved to IP address 154.194.143.141. The SSL certificate was issued by Let's Encrypt (E7), which is commonly abused by phishing sites. Domain creation date was April 16, 2026, and AlienVault OTX recorded it in one threat intelligence pulse, indicating active monitoring by security communities. These factors collectively confirm the domain's malicious nature and justify its elevated risk rating.

As of the latest analysis, coinbaseqianbao.com.cn is offline, but users should remain vigilant. PhishDestroy strongly advises against visiting this domain or entering any personal or financial information on similar sites. To stay safe, always verify URLs by checking official Coinbase communications, enable two-factor authentication, and report any suspicious domains to security teams. For comprehensive protection, use trusted anti-phishing tools and keep security software updated. Remember, legitimate companies like Coinbase do not request sensitive data via unsolicited links.