content--coinbase--exts[.]webflow[.]io

The domain content--Coinbase--exts.webflow.io has been identified as a phishing site impersonating Coinbase, a well-known cryptocurrency exchange. It currently has a VirusTotal detection score of 15/95, indicating a significant security concern. Additionally, Scamadviser rates the site as 'Very Likely Unsafe' with a trust score of just 1. Such indicators suggest that the site may be utilized for various phishing schemes aimed at unsuspecting users seeking cryptocurrency services.

This domain, registered with MarkMonitor, Inc., has an age of 4,675 days, adding to its credibility as a long-standing entity. However, it uses a paid WHOIS service to mask the owner's identity, which raises red flags regarding its legitimacy. The IP address 172.64.151.8 is currently active and the site is using a free website-building platform, often associated with less secure web properties. Scamadviser also notes that the site is being iframed by another website, further indicating potential malicious activity.

As of now, the domain is still active. PhishDestroy has reported this domain and it is under monitoring to prevent potential phishing activities targeting Coinbase users. Ongoing efforts include blocklisting to mitigate associated risks.