access-coinbase-pro-eng[.]pages[.]dev

This domain, access-coinbase-pro-eng.pages.dev, is a high-risk phishing site designed to impersonate Coinbase, a major cryptocurrency exchange platform. The site likely presents a fraudulent login interface to trick users into entering their credentials, which attackers can then harvest for unauthorized account access, financial theft, or further exploitation. Given the target brand's association with financial assets, victims may face immediate risks of drained funds or compromised personal data if they interact with the site. Analysis indicates the domain was created on October 08, 2025, and is registered through Cloudflare, Inc. It resolves to the IPv6 address 2606:4700:310c::ac42:2f4b, hosted on Cloudflare's infrastructure (AS13335). The site is flagged by Google Safe Browsing as phishing and appears on at least one security blocklist. VirusTotal reports detection by 18 out of 95 security vendors, confirming its malicious nature. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the threat, as phishing sites frequently use valid certificates to appear legitimate. If you visited access-coinbase-pro-eng.pages.dev or entered any credentials, take immediate action. Disconnect the device from the internet to prevent further data transmission. Reset passwords for Coinbase and any other accounts where the same credentials may have been reused, prioritizing accounts linked to financial services. Enable multi-factor authentication (MFA) on all critical accounts. Scan the device for malware using updated security tools, as phishing sites may deploy additional payloads. Monitor financial statements and account activity for unauthorized transactions. Report the incident to the targeted brand's security team and consider filing a report with local cybercrime authorities or platforms like the FBI's IC3.