home-coinbase-io[.]pages[.]dev

This domain is flagged as an elevated risk due to brand impersonation targeting Coinbase. The threat is primarily focused on deceiving users into believing they are accessing a legitimate Coinbase service, thereby attempting to illicitly gather personal and financial information from unsuspecting individuals.

The technical infrastructure of home-coinbase-io.pages.dev includes data points that highlight the threat severity. VirusTotal reports that 14 out of 95 security vendors have detected this domain as malicious. The domain was registered with Cloudflare, Inc., and it resolves to the IP address 172.66.47.30, located in the United States under AS13335, also associated with Cloudflare. Created on October 17, 2025, this domain is currently offline, having been blocked by PhishDestroy. Despite its offline status, its detection on at least one security blocklist indicates a recognized threat presence.

To mitigate the risks associated with domains like home-coinbase-io.pages.dev, it is crucial for users to carefully verify URLs before entering sensitive information, especially with widely impersonated brands. Organizations are advised to educate their clients on recognizing phishing attempts and to utilize comprehensive network security solutions that flag suspicious domains. Regular updates to threat intelligence databases and cross-referencing with multiple blocklists can also help in identifying and preemptively blocking emerging threats.