coinbase-wallet-exteension[.]typedream[.]app

This domain, coinbase-wallet-exteension.typedream.app, is currently flagged as an active brand impersonation threat specifically targeting Coinbase, a major cryptocurrency exchange platform. The site is designed to deceive users into believing they are interacting with legitimate Coinbase services, potentially leading to credential theft or unauthorized access to sensitive financial information. Analysis indicates the domain remains operational despite security warnings, posing an elevated risk to unsuspecting visitors. Infrastructure analysis reveals the domain was registered through Squarespace Domains II LLC on February 21, 2026, an unusually future-dated creation that may indicate fraudulent registration practices. It resolves to the IP address 104.21.37.85, hosted on Cloudflare's network (AS13335), which is commonly exploited by threat actors to obfuscate origins. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and is flagged by 17 of 95 security vendors on VirusTotal. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as malicious actors frequently leverage valid certificates to appear legitimate. The page title, 'Suspected phishing site | Cloudflare,' further corroborates its malicious classification. Current status assessment confirms the domain remains active and accessible, despite security vendor detections. Users are strongly advised to avoid interaction with this domain and any associated links. Organizations should implement immediate blocklisting of the domain and its resolving IP address (104.21.37.85) at the network perimeter. Individuals who may have engaged with the site should revoke any active sessions, reset credentials for Coinbase and related financial accounts, and monitor for unauthorized transactions. Security teams are encouraged to review logs for connections to the domain or IP address to identify potential compromise. Proactive measures, including user education on recognizing brand impersonation tactics, are critical to mitigating this threat.