node-coinbase[.]com

The domain node-coinbase.com was registered on February 06, 2026 through Hello Internet Corp and resolves to the IP address 192.178.155.103, which is hosted in the United States under ASN 13335 (Cloudflare, Inc.). The domain lacks an SSL/TLS certificate, indicating that any traffic to the site would be unencrypted. Nameserver records show the domain is delegated to NOVALEE.NS.CLOUDFLARE.COM and YAHIR.NS.CLOUDFLARE.COM, both Cloudflare‑operated resolvers. Threat intelligence flags the domain as a brand‑impersonation artifact targeting Facebook, with the specific scam type identified as a crypto scam.

The page title returned from the HTTP response is "Google," which does not align with the claimed Facebook impersonation and suggests possible content manipulation or a placeholder page. Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low reputation. The domain is listed on three public security blocklists and has been actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services. VirusTotal analysis shows that 14 of 95 security vendors have flagged the domain, corroborating its malicious classification.

The current operational status is offline, and no further HTTP content has been captured for deeper analysis. Defenders should continue to block node-coinbase.com at network perimeters, update intrusion detection signatures to include its IP and nameserver patterns, and monitor for any re‑registration attempts. Because the site is offline and the page title does not provide additional context, further investigation is limited to the observed infrastructure and reputation data.