coinsbaxeprologxo[.]gitbook[.]io

This domain, coinsbaxeprologxo.gitbook.io, poses a high risk of brand impersonation, specifically targeting the cryptocurrency exchange platform Coinbase. The domain impersonates Coinbase’s login page, potentially misleading users into entering their credentials and other sensitive information, which could be harvested by malicious actors for unauthorized access or financial fraud.

Analysis indicates that the domain has been flagged by 20 out of 95 security vendors on VirusTotal, with Google Safe Browsing also identifying it as a phishing site. The domain was registered through Cloudflare, Inc., and utilizes an SSL certificate from Google Trust Services / WE1. It resolves to the IP address 104.18.40.47, located in the United States under the AS13335 Cloudflare, Inc. network. The domain was created on February 21, 2026, and currently appears on 3 security blocklists. These indicators suggest a well-coordinated attempt to mimic the legitimate Coinbase brand, leveraging trusted infrastructure to evade initial detection.

Users who have visited this domain are advised to immediately change their Coinbase login credentials and monitor their accounts for any unauthorized activity. It is also recommended to enable two-factor authentication (2FA) on all cryptocurrency exchange platforms and to report the incident to Coinbase’s support team. Additionally, users should be cautious of any unsolicited communications purporting to be from Coinbase and verify the legitimacy of any links or domains by directly accessing the official Coinbase website.