unofficial---coinnbsse[.]pages[.]dev

The site hosted at unofficial---coinnbsse.pages.dev is a suspected phishing site that impersonates the brand Coinbase. The page title displayed "Suspected phishing site | Cloudflare," indicating the site was flagged for fraudulent activity. The threat posed is brand impersonation, designed to deceive users into believing they are interacting with a legitimate Coinbase service, potentially leading to credential theft or financial fraud.

Technical evidence confirms the malicious nature of the site. VirusTotal detected 12 out of 95 vendors flagging the domain, with specific flags from ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CyRadar. Google Safe Browsing marked it as FLAGGED for SOCIAL_ENGINEERING. The domain was registered on 2025-09-04 via Cloudflare, Inc., with nameservers rudy.ns.cloudflare.com and collins.ns.cloudflare.com. The IP address 172.66.47.127 is located in the United States and belongs to AS13335 Cloudflare, Inc. The SSL certificate was issued by Google Trust Services / WE1.

The site is currently offline, but its risk level remains high. The GridinSoft trust score is 0 out of 100, and the DOM risk score is 100, indicating a severe threat. The domain is listed on 1 blocklist. Despite being unreachable, the site's registration and configuration suggest it was prepared for malicious use, and users should avoid any interaction with the domain.