This site presents itself as a crypto-related platform, but the warning signs are hard to ignore. Legitimate crypto exchanges like the real Coinbase have transparent ownership, clear contact channels, and are never flagged by Google for phishing. Coinbase.kred fails on all of these fronts. The domain name is clearly designed to impersonate a trusted brand, yet the actual page title reads 'XMBTC' — a telltale sign of deception. It also blocks all search engine crawlers, which is unusual for any business that wants to be found. Most importantly, Google's Safe Browsing has flagged it for social engineering, meaning it's actively trying to manipulate or deceive visitors. If you're asking whether coinbase.kred is a scam, the evidence points strongly in that direction. Do not enter any login credentials, passwords, or financial information on this site. There is no proof of a real business behind it, and your safest move is to stay away entirely.
In plain English
This site is dangerous. Google has flagged it for social engineering, meaning it's designed to trick you. The name mimics Coinbase but the page title is 'XMBTC', and it blocks search engines from inspecting it. Avoid entering any personal or financial information here.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
Google Safe Browsing flagged this site for social engineering, which is a critical red flag. While the SSL setup is technically fine, that warning means the site is actively trying to trick visitors.
The site does publish a legal-entity disclosure page, which is a positive signal. But the domain itself is designed to mimic a well-known brand, and WHOIS is unavailable for the .kred TLD, making real ownership unclear.
No blacklist hits, but the Google Safe Browsing flag overshadows that. The site has no visible track record, no Trustpilot presence, and a very low profile overall.
The site is a single-page app that hides its content from crawlers, so contact info and social media links are invisible. The page title is 'XMBTC' rather than anything related to the domain name, which is deceptive.
Privacy policy, terms of service, and a legal-entity page are all present. That meets basic compliance for a commercial site, but for a crypto-focused domain these documents could be boilerplate and may not reflect a real business.
The site blocks all search engine crawlers via robots.txt, which is unusual for a legitimate business. DNS setup is minimal, no email handling, and the sitemap is misconfigured.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.