claim[.]sidekickfan[.]xyz

The domain claim.sidekickfan.xyz is a phishing site engaged in brand impersonation targeting Coinbase users. It presents itself as a cryptocurrency airdrop page to deceive victims into disclosing login credentials or sensitive information, though no drainer kit was identified. As of the latest verification, claim.sidekickfan.xyz has been taken offline.

Technical indicators confirm the elevated risk. The domain was flagged by 2 of 95 VirusTotal security vendors, including Forcepoint ThreatSeeker and G-Data, and appears on 2 security blocklists (PhishDestroy and ScamSniffer). It was created on February 21, 2026, and resolves to the IPv6 address 2606:4700:3033::ac43:d2a2, hosted on Cloudflare’s network (AS13335) in the US. The SSL certificate was issued by WE1, and the observed page title was 'Airdrop'. The registrar information is not available. Gridinsoft assigned a trust score of 0/100, reinforcing its malicious classification.

Individuals who interacted with claim.sidekickfan.xyz should immediately change their Coinbase passwords and enable two-factor authentication (2FA) if not already active. Monitor accounts for unauthorized transactions or login attempts. If cryptocurrency wallets were connected, revoke any token approvals via a blockchain explorer or wallet interface and consider transferring funds to a new wallet. Report the domain to Coinbase’s security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts.