costbasis[.]netlify[.]app

Analysis indicates that costbasis.netlify.app is an active brand‑impersonation site targeting Binance users. The domain was created on 22 February 2026 through Name.com and is hosted on Netlify infrastructure, as shown by the Netlify fingerprint and the presence of HTTP Strict Transport Security. The TLS certificate, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, provides a valid SSL chain. DNS resolution maps the domain to IP address 63.176.8.218, an Amazon.com, Inc. address located in Germany. The page title references a Coinbase cost‑basis tool, yet the declared brand target is Binance, indicating a likely attempt to deceive cryptocurrency users. Safe‑browsing services label the domain as social‑engineering, and VirusTotal reports six detections from ninety‑one scanners. The site appears on three public blocklists and is blocked by multiple security blocklists, while a trust score of 0/100 has been assigned. An HTTP 200 response confirms the site is reachable. No additional content analysis is available. Defenders should block the domain at the network perimeter, monitor DNS queries for the associated IP, and add the domain to internal deny lists. Users should be cautioned that any interaction with this site may constitute a phishing attempt impersonating Binance.