coinbasse-help-logd[.]pages[.]dev

This domain, coinbasse-help-logd.pages.dev, is identified as a generic phishing site targeting cryptocurrency users. Analysis indicates the infrastructure was designed to mimic legitimate crypto service portals, likely aiming to harvest wallet credentials or deploy drainer scripts. No specific brand impersonation or known drainer kit signatures were confirmed, but the domain follows patterns consistent with credential theft campaigns observed in recent months. The site’s design and naming convention suggest an intent to deceive users into entering sensitive information under false pretenses. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.66.44.130, hosted on Cloudflare’s network (AS13335). It was registered through Cloudflare, Inc. on October 17, 2025, and currently holds a VirusTotal detection score of 12/95 security vendors. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious sites leveraging Cloudflare’s proxy services. The domain appears on one security blocklist, and its page title was explicitly flagged as a suspected phishing site by the hosting provider. No Google Safe Browsing (GSB) status was recorded at the time of assessment. The domain is currently offline, having been taken down following detection and blocking by security systems. While the immediate threat has been mitigated, residual risk remains for users who may have interacted with the site prior to its removal. Organizations and individuals are advised to monitor for unauthorized transactions or credential misuse, particularly those associated with cryptocurrency wallets. Network administrators should ensure the domain and its resolving IP are blocked at the perimeter, and users should verify the authenticity of any crypto-related communication before engaging with links or entering sensitive data. Continuous vigilance is recommended, as threat actors frequently re-deploy similar infrastructure under new domains.