login-coinbse-learn[.]pages[.]dev

The domain login-coinbse-learn.pages.dev has been identified as a brand impersonation threat, specifically targeting the cryptocurrency exchange platform Coinbase. The domain is currently offline, which may indicate that it has been taken down or is no longer active.

This domain is flagged by 13 of 95 VirusTotal vendors, indicating a moderate level of suspicion among security researchers. Infrastructure analysis reveals that the domain resolves to the IP address 188.114.96.3 and is registered through Cloudflare, Inc. The domain was created on November 05, 2025, and is associated with an SSL certificate issued by Google Trust Services / WE1. The domain appears on one security blocklist, further corroborating the suspicions of malicious intent. The page title, 'Suspected phishing site | Cloudflare,' also suggests that the domain was being used for phishing activities.

Given the current status of the domain as offline, it is recommended that users remain vigilant and avoid visiting the site. Security professionals should monitor the domain for any signs of reactivation and ensure that it remains blocked in their network security configurations. Additionally, users should be educated on the signs of brand impersonation and phishing attacks, and encouraged to verify the legitimacy of websites through official channels before providing any sensitive information.