get-coinbse-logn[.]pages[.]dev

PhishDestroy identifies get-coinbse-logn.pages.dev as a confirmed phishing site targeting cryptocurrency users. This domain impersonates the Coinbase login page to steal credentials and potentially drain victims' crypto assets. The threat type is generic phishing, with a clear attempt to deceive users into entering sensitive login information under the guise of a legitimate Coinbase portal.

Technical indicators paint a damning picture. VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious. The domain was created on October 9, 2025, and registered through Cloudflare, Inc. It resolves to IP address 172.66.47.187 and uses an SSL certificate issued by Google Trust Services (WE1). Google Safe Browsing categorizes it as phishing, and it appears on at least 1 security blocklist, confirming its malicious intent.

As of the latest check, the domain is offline due to Cloudflare's intervention, displaying a 'Suspected phishing site' notice. However, the threat remains significant as similar domains often re-emerge. Users who may have interacted with this site should immediately change their Coinbase passwords, enable two-factor authentication, and monitor accounts for unauthorized activity. Always verify URLs directly through official Coinbase channels. For real-time checks, use PhishDestroy's verification tools.