ie-coin-base[.]pages[.]dev

PhishDestroy identifies ie-coin-base.pages.dev as a brand impersonation threat targeting Coinbase, currently marked as offline with an elevated risk level. The domain was designed to deceive users into believing they were accessing legitimate Coinbase services, posing a significant risk of credential theft and financial fraud.

Analysis reveals that the domain was created on October 11, 2025, and registered through Cloudflare, Inc., resolving to IP address 172.66.44.61. It carries an SSL certificate issued by Google Trust Services / WE1. Notably, VirusTotal shows 0 out of 95 detections, indicating the domain was not widely flagged by security vendors. However, Google Safe Browsing flags it as phishing, and it appears on 3 security blocklists. The page title displayed "Suspected phishing site | Cloudflare," confirming its malicious intent.

Given its offline status, the immediate threat is mitigated, but users should remain vigilant. PhishDestroy recommends avoiding any interaction with similar domains and reporting such incidents to the impersonated brand. Users who may have engaged with the site should change their Coinbase credentials immediately and enable two-factor authentication for enhanced security.