coinbase-aave[.]com

The domain coinbase-aave.com has been identified as a brand impersonation threat, specifically targeting the Coinbase cryptocurrency platform. This malicious domain is currently active and poses a high risk to users who may mistake it for a legitimate Coinbase service. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 16, 2026, and resolves to IP address 104.21.60.129.

According to intelligence data, this domain appears on three security blocklists, indicating it has been flagged by multiple threat intelligence sources. VirusTotal shows zero detections out of 95 vendors, meaning it has not yet been widely recognized as malicious, but its SSL certificate is issued by Google Trust Services, which can lend a false sense of legitimacy. The page title found is simply "Guide," which is generic and likely part of a phishing lure.

Given the active status and high risk level, users are strongly advised to avoid interacting with coinbase-aave.com. PhishDestroy recommends adding this domain to blocklists, reporting it to relevant authorities, and educating users to verify URLs carefully before entering credentials or sensitive information. Always access Coinbase directly through its official website and enable two-factor authentication for added security.