elizaeco[.]com

This domain, elizaeco.com, presents an elevated risk level as a brand impersonation phishing site targeting Coinbase users. The specific threat type is a fake login page designed to harvest cryptocurrency wallet credentials and personal information. Analysis indicates the domain is actively serving malicious content through Cloudflare infrastructure, with a page title consisting of a UUID (b04a41a9-b6ea-4e79-a956-3a2d115d3e8a), a common evasion technique used to avoid automated scanning.

Technical indicators provide strong evidence of malicious intent. VirusTotal detection shows 13 out of 95 security vendors flagging this domain as malicious. Infrastructure analysis reveals the domain resolves to IP address 104.21.85.178, with an SSL certificate issued by Google Trust Services, and is registered through NiceNIC International Group Co., Limited as of February 21, 2026. The Gridinsoft trust score is 0 out of 100, and the domain appears on 2 security blocklists, having already been blocked by PhishDestroy and InversionDNS. The registration through a privacy-oriented registrar and recent creation date are consistent with phishing domain lifecycle patterns.

Mitigation steps specific to this Coinbase brand impersonation threat include: immediately block all traffic to elizaeco.com at network perimeter firewalls and DNS filtering systems. End users who have visited this domain should change their Coinbase account credentials and enable two-factor authentication if not already active. Security teams should monitor for any credential exposure or account compromise related to this campaign. Organizations should update their phishing blocklists with the domain and associated IP 104.21.85.178. Further investigation into the domain's SSL certificate and Cloudflare configuration may assist in identifying related phishing infrastructure.