My security researcher friend said that the credhot is not safe to use. It has a malware and it can be injected in your browser to steal data, cookies, history, etc. Be careful.
Any proofs of what you are saying? It sounds impossible if a trusted site like coinbase cooperate with a site that has a malware to steal user's data.