coin-nav-base-learn[.]pages[.]dev

The domain coin-nav-base-learn.pages.dev has been identified as a brand impersonation threat specifically targeting Coinbase users. This phishing site is designed to trick visitors into believing they are accessing a legitimate Coinbase Pro login page, as indicated by the page title 'Coinbase Pro Login - Secure and Fast Access 🚀'. Fortunately, the domain is currently offline, meaning the immediate risk of credential theft is mitigated, but the underlying infrastructure could be reactivated.

Technical analysis reveals that the domain was created on October 09, 2025, and is registered through Cloudflare, Inc. It resolves to IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services (WE1). According to VirusTotal, 5 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. These indicators confirm the domain's malicious intent and potential for harm if brought back online.

Given the elevated risk level associated with this Coinbase impersonation, users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with this domain change their Coinbase credentials immediately and enable two-factor authentication. Always verify the authenticity of login pages by checking the URL carefully and using official Coinbase channels. If you encounter similar domains, report them through PhishDestroy to help protect the community.