cb[.]careplus247[.]info

The domain cb.careplus247.info is flagged as a high-risk brand impersonation targeting Coinbase and is currently offline. The domain impersonates the Coinbase brand by using a page title 'Contact us | Coinbase Help,' which mimics legitimate Coinbase support pages to deceive users.

Analysis indicates that the domain cb.careplus247.info has been flagged by 16 of 95 VirusTotal vendors, marking it as a phishing site. The domain is registered through NameSilo, LLC and resolves to the IP address 198.12.93.82, which is located in the United States and is part of the AS36352 HostPapa network. The domain was created on December 04, 2025, and appears on one security blocklist. Notably, the domain lacks an SSL certificate, which is a common indicator of a lack of security and trustworthiness.

The domain is currently offline, which may indicate that it has been taken down by security measures or the attackers. However, users should remain vigilant and avoid any links or communications related to this domain. Security teams are advised to monitor for similar domain registrations and IP addresses to preemptively block potential reincarnations. Additionally, users should verify the URL and SSL certificate of any Coinbase-related pages and report any suspicious activity to their security teams or the official Coinbase support.