coinbase-chromextension[.]pages[.]dev

This domain, coinbase-chromextension.pages.dev, poses a high risk of brand impersonation, specifically targeting Coinbase users. If accessed, the site could deceive visitors into believing they are interacting with a legitimate Coinbase service, potentially leading to the theft of sensitive information such as login credentials, API keys, and personal data.

Analysis indicates that coinbase-chromextension.pages.dev was registered through Cloudflare, Inc. and created on October 08, 2025. The domain has been flagged by 16 out of 95 security vendors on VirusTotal, and Google Safe Browsing has marked it as a phishing site. Additionally, the domain appears on one security blocklist and has been taken offline by PhishDestroy. The use of a Cloudflare registrar and the relatively high detection count from security vendors suggest a deliberate attempt to impersonate Coinbase and exploit its brand trust.

If a user has visited this site, they should immediately change their Coinbase account passwords and any other login credentials that may have been compromised. It is also advisable to monitor financial statements for any unauthorized transactions and to report the incident to Coinbase's customer support. Users should avoid interacting with any links or downloading files from this domain, as they could be malicious. For further protection, users should enable two-factor authentication on their Coinbase accounts and consider using a password manager to generate and store strong, unique passwords.