coinbaseveri[.]com

This domain, coinbaseveri.com, poses a high-risk threat by impersonating the official Coinbase cryptocurrency exchange platform. Analysis indicates the site presents a fraudulent login portal designed to harvest user credentials, potentially leading to unauthorized access to digital wallets and financial theft. The page title, 'Coinbase - Buy and Sell Bitcoin, Ethereum, and more with trust,' mimics legitimate branding to deceive visitors into entering sensitive account information, a tactic commonly associated with credential phishing and subsequent crypto asset drainage. Technical indicators confirm the malicious nature of this domain. VirusTotal reports 17 out of 95 security vendors flagging coinbaseveri.com as malicious, while Google Safe Browsing explicitly classifies it as a phishing site. The domain was registered on December 23, 2025, through Unstoppable Domains Inc., and resolves to the IP address 153.92.8.43, hosted by AS47583 (Hostinger International Limited) in Indonesia. Infrastructure analysis reveals the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, further corroborating its association with fraudulent activity. Notably, the absence of an SSL certificate undermines any pretense of legitimacy, as modern secure platforms universally employ encryption. Users who visited coinbaseveri.com should immediately revoke any entered credentials and enable multi-factor authentication on their legitimate Coinbase accounts. All potentially exposed passwords should be changed across any platforms where identical credentials were reused. Monitoring for unauthorized transactions or login attempts is critical, particularly within cryptocurrency wallets linked to the compromised account. If financial loss is suspected, affected parties should report the incident to relevant cybersecurity authorities and their financial institutions to initiate fraud mitigation procedures. Proactive measures, such as deploying browser-based security extensions and verifying domain authenticity before inputting credentials, are recommended to prevent future exposure to similar threats.