coinbase-pay[.]gives

The domain coinbase-pay.gives is confirmed as an active phishing site specializing in brand impersonation. Analysis indicates the site mimics Coinbase Commerce, specifically presenting a fraudulent 'Receipt for Incoming Transfer' page to deceive users into disclosing credentials or financial details. The domain currently remains operational and poses a high risk to individuals interacting with cryptocurrency platforms. Infrastructure analysis reveals the domain was registered on March 5, 2026, through Global Domain Group LLC. It resolves to the IP address 188.114.96.3 and employs an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. Security vendors have flagged this domain extensively: 16 of 95 VirusTotal vendors detect it as malicious, and it appears on four security blocklists. Additionally, Google Safe Browsing has labeled it with a 'SOCIAL_ENGINEERING' warning, while multiple threat intelligence platforms, including MetaMask, PhishDestroy, SEAL, and InversionDNS, have blocked it. The domain remains active and continues to host phishing content. Organizations and individuals are advised to block the domain and its resolving IP at the network level. Users who may have interacted with this site should immediately revoke any active sessions, reset credentials, and monitor accounts for unauthorized transactions. Security teams should prioritize updating detection rules to include this domain and its associated indicators in threat feeds.