vooi-v2-app[.]org

This domain, vooi-v2-app.org, is confirmed as a phishing site specifically designed to impersonate Coinbase, a legitimate cryptocurrency exchange. The site's page title, 'VOOI Light - Apply to claim,' indicates it likely lured victims with a fake claim or giveaway offer to steal login credentials, private keys, or other sensitive financial information. The domain was created on November 20, 2025, and is now offline, but it posed an elevated risk due to its sophisticated infrastructure and low trust score.

Technical analysis shows that the domain is flagged by 5 out of 95 security vendors on VirusTotal, and it appears on 4 separate security blocklists, including Codeesura, Polkadot, PhishDestroy, and Enkrypt. Gridinsoft assigns a trust score of 0 out of 100, indicating extreme suspicion. The domain resolves to IP address 172.67.152.37 and uses Cloudflare with HTTP/3 for delivery, along with an SSL certificate from Google Trust Services to appear legitimate. It was registered through Web Commerce Communications Limited.

Users who visited this site should immediately change their Coinbase account passwords and enable two-factor authentication if they entered any credentials. They should also monitor their accounts for unauthorized transactions and report any suspicious activity to Coinbase support. Additionally, they should scan their devices for malware and avoid reusing passwords across platforms.