en--sso--p-coinbasepro---auth-cdn[.]webflow[.]io
Domain Security & Threat Intelligence Report
Analyst Security Overview
AI-GeneratedThe domain en--sso--p-coinbasepro---auth-cdn.webflow.io impersonates Coinbase, specifically targeting users seeking to access their accounts. Its Virustotal score is 18/95, indicating a significant potential for malicious activity. This domain is in the phishing category as it attempts to deceive users into providing sensitive credentials.
Registered with MarkMonitor, Inc., this domain is aged 4675 days and is hosted on the IP address 198.18.1.77. Although it has been active for several years, it has been blocklisted three times by various security services. The longevity of its registration combined with its current status raises concerns regarding its use in ongoing phishing campaigns.
Currently, the domain is alive, and PhishDestroy has reported it for phishing activity while actively monitoring its status. There are ongoing efforts to block access to this domain through various security measures.
Threat Response Pipeline
Public Blocklist Status
Website Screenshot
Domain Intelligence
lamar.ns.cloudflare.com
whoisrequest@markmonitor.com
abuse@webflow.com
VirusTotal Analysis
Evidence & External Reports
URLScan Report
VirusTotal
URLQuery
Wayback Machine
WHOIS Lookup
Cloudflare Radar 
Shodan
ScamAdviser
ChainAbuse
Were You Affected by This Site?
If you have interacted with this domain, entered personal information, or connected a cryptocurrency wallet — take immediate action. Below are resources to help you report the incident and protect yourself.
Report to Your Local Authorities
Select your country to see local cybercrime reporting contacts and complaint templates.
Related Domain Reports
Other Domains on 198.18.1.77
More Domains at MarkMonitor, Inc.
Stay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive