logn-coinbase-en-us[.]pages[.]dev

The domain logn-coinbase-en-us.pages.dev is a suspected phishing site that specifically poses a risk of brand impersonation, targeting the cryptocurrency platform Coinbase. The site has an elevated risk level and is currently taken offline. The page title observed was 'Suspected phishing site | Cloudflare'.

logn-coinbase-en-us.pages.dev has been flagged by 9 of 95 VirusTotal vendors, including ChainPatrol, alphaMountain.ai, and BitDefender. The domain is registered through Cloudflare, Inc. and was created on November 04, 2025. It resolves to the IP address 172.66.47.122, which is located in the US and belongs to AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. The domain appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. The HTTP status code is 403, and technologies detected include HSTS, Cloudflare, and HTTP/3.

If a user has interacted with logn-coinbase-en-us.pages.dev, they should immediately change their Coinbase account passwords and enable two-factor authentication to prevent unauthorized access. They should also monitor their account for any signs of fraud or suspicious activity. Users can report this phishing site to Coinbase directly through their support channels, and to the relevant security blocklists such as PhishDestroy, MetaMask, and SEAL to help protect others from falling victim to this scam.