rexas-rewards[.]com

This domain is flagged as a brand impersonation threat specifically targeting Coinbase users. The site presented itself as 'Rexas Early Adopter Rewards - Claim Your Allocation', a fraudulent scheme designed to harvest credentials or cryptocurrency allocations from victims by mimicking a legitimate Coinbase rewards program. The domain is now offline but poses residual risk to users who may have interacted with it.

Evidence confirms the threat level. VirusTotal analysis shows 2 out of 95 security vendors flagging this domain. The domain was registered on December 09, 2025, through Cosmotown, Inc., with SSL certificate issued by Google Trust Services. It resolves to IP address 104.21.86.105 and appears on 5 security blocklists including Codeesura, Polkadot, ScamSniffer, PhishDestroy, and Enkrypt. The Gridinsoft trust score is 0 out of 100, indicating high suspicion. Detected technologies include HSTS, Cloudflare, and HTTP/3.

Users who visited this domain should immediately change passwords and enable two-factor authentication on their Coinbase accounts. They should monitor for unauthorized transactions and report any suspicious activity to Coinbase support. Additionally, users should run a security scan on their devices and avoid reusing passwords across platforms. No credentials or funds should be shared with any site claiming rewards without official verification through the Coinbase platform.