coinbuse[.]wixstudio[.]com

PhishDestroy identifies coinbuse.wixstudio.com as an active brand impersonation scam targeting Coinbase users. This fraudulent WixStudio subdomain mimics Coinbase’s official wallet login portal with the goal of stealing credentials and cryptocurrency. The site resolves to IP 34.144.206.118 and uses a Let’s Encrypt SSL certificate to appear legitimate, but it is not affiliated with Coinbase in any way. This domain was flagged with 0 out of 95 VirusTotal detections at time of analysis, suggesting it has not yet been widely blacklisted. It is hosted on WixStudio, a legitimate website builder, which has been abused to create the fraudulent login page. The site’s impersonation of Coinbase is clear and direct, using branding, layout, and copy closely aligned with Coinbase’s official interface to deceive visitors into entering sensitive information. If you visited coinbuse.wixstudio.com or entered any information, assume your credentials and wallet access may be compromised. Immediately change your Coinbase password and enable two-factor authentication. If you used the same email and password elsewhere, update those accounts immediately as well. Do not use this domain or any links from it. Report the site to Coinbase and PhishDestroy. Always verify website URLs and use official Coinbase channels for login.