coinbase-en-pro[.]pages[.]dev

This report analyzes the domain coinbase-en-pro.pages.dev, which is a suspected phishing site. The page title, "Suspected phishing site | Cloudflare," and the impersonation of the Coinbase brand indicate this site is designed to deceive users into believing it is a legitimate Coinbase cryptocurrency platform. The threat posed is credential theft or cryptocurrency fraud, as victims may be tricked into entering sensitive account information.

Technical evidence from the provided data shows that this domain was flagged by 13 out of 95 VirusTotal vendors, with specific detection by ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CyRadar. The domain is registered through Cloudflare, Inc. and was created on 2025-10-11. It resolves to IP address 172.66.47.105 (United States), hosted by AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1, and the nameservers are olof.ns.cloudflare.com and mallory.ns.cloudflare.com. The domain has a GridinSoft trust score of 0 out of 100 and a DOM risk score of 78.

The current status of this domain is DOWN/OFFLINE, indicating it is no longer accessible. Despite being offline, the domain poses a high risk due to its impersonation of a major brand and cryptocurrency scam type. The risk score of 78 and low trust rating underscore its malicious intent, and it remains a threat if reactivated.