coinbase-io[.]meku[.]app

The domain coinbase-io.meku.app has been identified as a high-risk brand impersonation threat, specifically targeting users of the cryptocurrency platform Coinbase. As of the latest assessment, this domain has been taken offline. The page title discovered on the site was 'Log In | CoinBase™', which closely mimics the legitimate branding of Coinbase, potentially misleading users into providing sensitive information.

This domain has been flagged by 21 out of 95 security vendors on VirusTotal, indicating a significant level of detection and concern within the cybersecurity community. Registered through Porkbun LLC, the domain resolves to the IP address 157.230.64.11, hosted in the United States under AS14061 by DigitalOcean, LLC. The domain was created on February 21, 2026, and was quickly identified as a threat. It appears on three security blocklists and is flagged as a phishing site by Google Safe Browsing. The SSL certificate for this domain was issued by Let's Encrypt, specifically certificate E7.

Given the current status of the domain as offline, the immediate threat has been mitigated. However, it is crucial for users to remain vigilant and continuously verify the legitimacy of websites requesting sensitive information. It is recommended that users enable advanced security measures, such as two-factor authentication, and regularly update their security software to detect and protect against potential phishing attempts. Additionally, organizations should ensure their employees are trained to recognize phishing tactics and regularly audit their cybersecurity protocols to prevent similar threats.