coinbase-prod---client-coinbase-11ruo4o76[.]mintlify[.]review

The domain coinbase-prod---client-coinbase-11ruo4o76.mintlify.review was registered on June 2, 2023 through Squarespace Domains II LLC and is currently taken offline. Technical probing shows the hostname resolves to IP address 76.76.21.61, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. DNS resolution uses Vercel name servers (ns1.vercel-dns.com, ns2.vercel-dns.com), and the site served an HTTPS certificate issued by Let’s Encrypt (R12). An HTTP request returned a 404 status, and the page title observed during the brief scan was "Coinbase Developer Docs - Coinbase Developer Documentation," indicating an attempt to mimic official Coinbase developer resources.

Google Safe Browsing classifies the URL as a social‑engineering threat, and VirusTotal recorded 16 detections out of 95 scanned security vendors. The domain appears on a single security blocklist and has been blocked by PhishDestroy. Scamadviser assigned a trust score of 1/100, and the threat is cataloged as a crypto‑related scam.

While the page content beyond the title has not been captured, the convergence of brand‑targeted naming, legitimate‑looking title, and multiple security vendor detections strongly suggests a brand‑impersonation campaign aimed at Coinbase users. Defenders should add the domain and its resolving IP to blocklists, monitor for any re‑hosting attempts on the same infrastructure, and ensure that endpoint protection systems reference the Google Safe Browsing and VirusTotal findings. Ongoing observation of the registrar and hosting provider for related registrations is also advisable.