coinbse[.]my[.]canva[.]site

The domain coinbse.my.canva.site is a phishing site engaged in brand impersonation targeting Coinbase, a cryptocurrency exchange platform. It presents itself as the official Coinbase Pro website to deceive users into disclosing login credentials or sensitive information, classifying it as a crypto scam. No drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate risk but not eliminating potential follow-on fraud.

Technical analysis of coinbse.my.canva.site reveals limited detection, with 1 of 95 VirusTotal security vendors flagging the domain. The domain was registered through GANDI SAS on April 03, 2018, and resolves to the IP address 103.169.142.6, hosted on Cloudflare infrastructure in Australia. It appears on 1 security blocklist, specifically PhishDestroy, and uses an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Çoinbase Pro | Official Website | Digital Asset Exchange', mimicking the legitimate Coinbase Pro branding. Technologies detected include Cloudflare and HTTP/3, with the site currently returning a 404 HTTP status.

Users who interacted with coinbse.my.canva.site should immediately change their Coinbase passwords and enable two-factor authentication (2FA) if not already active. Monitor account activity for unauthorized transactions or login attempts, and report any suspicious activity to Coinbase support. Victims should also report the phishing domain to their local cybercrime authorities, Google Safe Browsing, and platforms like PhishTank or the Anti-Phishing Working Group to aid in broader mitigation efforts.