coinbase-demo[.]quantzk[.]io

This domain, coinbase-demo.quantzk.io, is flagged as a high-risk phishing site specifically designed to impersonate Coinbase, a cryptocurrency exchange platform. The page title, 'ZKProtocol - Coinbase Security Demo,' suggests an attempt to deceive users into believing they are interacting with a legitimate Coinbase security demonstration or protocol. Such impersonation typically aims to harvest login credentials, personal information, or cryptocurrency wallet details under false pretenses. The domain’s infrastructure and branding mimicry indicate a targeted campaign to exploit trust in the Coinbase brand, potentially leading to financial loss or unauthorized account access for victims. Analysis indicates the domain was registered on October 22, 2025, through NameCheap, Inc., and resolves to the IP address 35.157.26.135, hosted in Germany under AS16509 (Amazon.com, Inc.). The domain appears on one security blocklist and is flagged by Google Safe Browsing as phishing. VirusTotal reports that 12 out of 95 security vendors classify this domain as malicious, further corroborating its high-risk status. Notably, the domain lacks an SSL certificate, which is atypical for legitimate financial or security-related platforms and serves as an additional red flag for users. Users who visited coinbase-demo.quantzk.io should immediately cease all interaction with the site. If any credentials, personal information, or cryptocurrency details were entered, affected individuals should reset passwords for their Coinbase accounts and any other platforms where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access risks. Monitor financial and cryptocurrency accounts for suspicious activity, and report the incident to relevant security teams or fraud prevention services. The domain is currently offline, but users should remain vigilant for similar phishing attempts targeting Coinbase or other financial platforms.