start-coenbase-io-learn[.]pages[.]dev

This domain is confirmed to be a brand impersonation site targeting the Base brand. The site poses an elevated risk to users who may be tricked into believing it is an official Base page, potentially leading to the disclosure of sensitive information such as login credentials, personal data, or financial details.

Analysis indicates that the domain start-coenbase-io-learn.pages.dev was created on October 15, 2025, and is registered through Cloudflare, Inc. It was flagged by 10 out of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion. The domain resolves to the IP address 2606:4700:310c::ac42:2f63, which is located in the United States and is part of Cloudflare's network (AS13335). The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting visitors. The site has been taken offline and appears on one security blocklist, indicating that it has been identified as a threat by security services.

If a user has visited this site, they should immediately check their account for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication on all relevant accounts. Users should also monitor their financial statements for any suspicious transactions. Reporting the incident to the official Base support and local cybersecurity authorities can help mitigate the potential damage and prevent others from falling victim to the same scam.