m.help-coinbase.beer
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of m.help-coinbase.beer
The domain m.help-coinbase.beer appears to present a login page styled to resemble Coinbase, a well-known cryptocurrency platform. The screenshot shows a minimal sign-in form using Coinbase branding elements and wording such as "Sign in to Coinbase," suggesting that the page is attempting to collect account credentials or related user information.
Based on the domain structure and classification data, this site does not appear to be an official Coinbase domain. The hostname combines the Coinbase brand name with additional words on an unrelated .beer top-level domain, which is not a typical pattern for a legitimate financial-services login portal. Available categorization data associates the site with phishing and fraud-related classifications rather than a normal cryptocurrency service.
Safety Assessment for m.help-coinbase.beer
This website shows multiple high-risk indicators at the time of this scan. It was flagged by 25 out of 91 security engines, and multiple web-classification providers categorized it as phishing or fraud-related. In addition, major threat-database checks indicated social-engineering and phishing listings, while another blacklist source also listed the domain. Although one malware scan reported no infected files, that result does not outweigh the broader consensus pointing to credential-theft risk.
The domain also closely resembles coinbase.com and may be a look-alike intended to imitate the Coinbase brand. That concern is reinforced by the screenshot, which displays a Coinbase-branded sign-in page on a newly registered domain that is only 8 days old, has no established traffic ranking, and uses an unrelated top-level domain. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but adds a small amount of additional caution here.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate that was set to expire on 2026-11-18, which means the connection may be encrypted in transit. However, the presence of HTTPS should not be treated as proof of legitimacy, especially for login pages. The reported server IP is 217.60.195.77, hosted by pfcloude in Eygelshoven, The Netherlands, and the web server software was not identified in the scan data.
From a domain-security perspective, the registration is very recent, DNSSEC is unsigned, and the nameservers are standard registrar-provided hosts. The combination of a very new registration, lack of DNSSEC, and a brand-resembling subdomain used for a financial login page may increase suspicion at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?