isozf-coinbase[.]com

This domain, isozf-coinbase.com, is flagged for brand impersonation, specifically targeting the well-known cryptocurrency exchange Coinbase. The risk level is elevated, and the domain is currently offline, which suggests it may have been taken down by security measures or the registrant. However, it remains a potential threat as it was previously active and could be reactivated.

Analysis indicates that the domain was created on November 09, 2025, and has been flagged by 4 out of 95 security vendors on VirusTotal. The page title 'Checking Connection - Please Wait' is a common tactic used in phishing campaigns to keep users engaged while the attack is being carried out. The domain resolves to the IP address 84.32.84.171 and is registered through NiceNIC International Group Co., Limited. It has also appeared on one security blocklist, further confirming its malicious nature.

If a user has visited this domain, they should immediately check their account activity on Coinbase for any unauthorized transactions. It is recommended to change passwords and enable two-factor authentication (2FA) if not already in place. Users should also monitor their financial statements for any unusual activity and report any suspicious incidents to their financial institutions and Coinbase's support team. Regularly updating security software and remaining vigilant against similar impersonation attempts can help prevent future incidents.