coinbase-customer-support-ee1[.]pages[.]dev

This domain poses a significant threat as a brand impersonation site, specifically targeting Coinbase customers. It is designed to deceive users into believing they are interacting with a legitimate Coinbase customer support page, which can lead to the theft of personal and financial information.

Analysis indicates that coinbase-customer-support-ee1.pages.dev was created on February 04, 2026, and registered through Cloudflare, Inc. The domain has been flagged by 18 out of 95 security vendors on VirusTotal, and it appears on three security blocklists. Google Safe Browsing also identifies this domain as a phishing site. The SSL certificate is issued by Google Trust Services, which may give a false sense of security to unsuspecting users. The domain resolves to an IP address (172.66.47.163) located in the United States and is operated by AS13335 Cloudflare, Inc. These technical indicators, combined with the page title 'Suspected phishing site | Cloudflare,' strongly suggest that the site is a malicious attempt to impersonate Coinbase.

If an individual has visited this site, they should immediately check their Coinbase account for any unauthorized activity and change their login credentials. It is also recommended to monitor credit reports and bank statements for signs of fraud. Users should report the incident to Coinbase's official customer support and consider running a full system scan to ensure no malware was installed. Additionally, enabling two-factor authentication (2FA) on all accounts can provide an extra layer of security.