coinbaseconnect[.]us

This domain, coinbaseconnect.us, is flagged for high-risk brand impersonation, specifically targeting users of the cryptocurrency platform Coinbase. The site impersonates Coinbase’s legitimate web presence, aiming to deceive visitors into disclosing sensitive information such as login credentials, personal data, and financial details. The primary threat posed by this domain is the potential for financial loss and identity theft.

Analysis indicates that coinbaseconnect.us has been identified by 17 out of 95 security vendors on VirusTotal as a malicious domain. The domain was created on February 21, 2026, and is registered through Hosting Concepts B.V. d/b/a Registrar.eu. Google Safe Browsing has also flagged this domain as a phishing site. It resolves to the IP address 34.120.137.41, which is located in the United States and is part of the AS396982 Google LLC network. The domain appears on three security blocklists and is currently taken offline.

If a user has visited coinbaseconnect.us, it is crucial to take immediate steps to secure their accounts. First, change the passwords for any Coinbase accounts and any other accounts that use the same or similar credentials. Enable two-factor authentication (2FA) to add an additional layer of security. Monitor bank and credit card statements for any unauthorized transactions and report any suspicious activity to the appropriate financial institutions and Coinbase’s support team. Additionally, consider running a comprehensive security scan on the device used to access the site to ensure it has not been compromised.