acces-en-coinbase[.]pages[.]dev

The domain acces-en-coinbase.pages.dev was registered on February 21, 2026 via Cloudflare, Inc. It resolves to the IPv6 address 2606:4700:310c::ac42:2ca7, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are zita.ns.cloudflare.com and mike.ns.cloudflare.com, indicating the host is fully provisioned on Cloudflare's network. The site presents an HSTS header and is protected by Cloudflare’s SSL certificate issued by Google Trust Services (certificate label WE1). An HTTP request to the domain returns a 403 status code and the page title "Suspected phishing site | Cloudflare".

Security intelligence classifies the site as a crypto‑related scam impersonating the Coinbase brand, and it has been placed on one security blocklist. The domain is currently listed as offline and has been blocked by the PhishDestroy service. Reputation assessments are poor, with a Gridinsoft trust score of 0 / 100 and a Scamadviser score of 41 / 100. VirusTotal analysis shows that 2 of 93 scanning engines flagged the domain, reinforcing the malicious classification.

No additional content analysis is available beyond the page title. Defenders should add the IPv6 address and domain to network blocklists, enforce DNS filtering for the domain, and monitor Cloudflare‑hosted IP ranges for similar activity. Continuous re‑scanning with multi‑engine services is advised to capture any changes in the payload or hosting configuration.