coinbase-log-pro-wep[.]pages[.]dev

The domain coinbase-log-pro-wep.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is currently listed as offline. DNS resolution points to IP address 188.114.97.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. The hosting infrastructure advertises HSTS, Cloudflare services, and HTTP/3, and the TLS certificate is issued by Google Trust Services under the WE1 label, indicating a legitimate‑looking HTTPS endpoint.

The page title returned by the server is "Suspected phishing site | Cloudflare" and the HTTP response code is 403, suggesting that the site is no longer serving content. Security telemetry shows that Google Safe Browsing has flagged the domain for social engineering, and Gridinsoft assigns a trust score of 0 out of 100. VirusTotal analysis records 11 of 93 scanned vendors flagging the domain as malicious, and the site appears on at least one external blocklist.

PhishDestroy has already taken the domain offline, and the risk rating is high due to its impersonation of the Coinbase brand and the classification as a crypto scam. Defenders should ensure that outbound traffic to 188.114.97.3 is blocked, add coinbase-log-pro-wep.pages.dev to local deny lists, and monitor Cloudflare name servers daisy.ns.cloudflare.com and buck.ns.cloudflare.com for any re‑use of the domain or similar sub‑domains. Continuous monitoring of Google Safe Browsing, VirusTotal, and other threat feeds is advised to detect potential re‑activation or new domains that mimic the same brand.