ui-coinbase[.]com

The domain ui-coinbase.com is identified as a brand impersonation threat, currently offline. This domain impersonates Coinbase, a well-known cryptocurrency exchange platform. The impersonation aims to deceive users into believing they are interacting with legitimate Coinbase services, potentially leading to financial loss or theft of personal information.

Analysis indicates that ui-coinbase.com was created on April 28, 2026, and resolves to the IP address 66.78.40.31. The domain has been flagged by 7 of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion among the security community. It appears in 1 threat intelligence pulse on AlienVault OTX and has a Gridinsoft trust score of 0/100, indicating a complete lack of trust in the domain's legitimacy. Additionally, the domain is listed on 3 security blocklists, further corroborating its malicious nature. The domain is registered through Fewmoretaps OU d/b/a Trustname.com, which may be a registrar associated with other suspicious activities.

Given the current status of the domain being offline, the immediate risk to users is reduced. However, it is crucial to remain vigilant as the domain could be reactivated. Security recommendations include avoiding any interaction with the domain and ensuring that security software and blocklists are updated to recognize and block this domain. Users should also verify the authenticity of websites through official channels before providing any sensitive information or conducting financial transactions.