coqqzzss[.]top

The domain coqqzzss.top is identified as a high-risk source of brand impersonation, specifically targeting Coinbase. This kind of phishing domain is crafted to deceive users into believing they are interacting with the legitimate Coinbase platform, potentially leading to unauthorized access to personal and financial data. The page title of this domain explicitly displays 'Coinbase,' clearly intending to mislead visitors by simulating the appearance of the genuine site.

Analysis reveals this domain was flagged by 15 out of 95 security vendors on VirusTotal, confirming its malicious nature. The domain is registered through Gname.com Pte. Ltd. and resolved to the IP address 103.108.41.18 located in Hong Kong (AS135581 ONL-HK). Created on December 12, 2025, coqqzzss.top lacked an SSL certificate, further compromising data security by exposing users to unencrypted communications. The domain appears on one security blocklist and has been blocked by PhishDestroy, supporting the assessment that this domain operated with intent to impersonate the Coinbase brand.

Users who may have interacted with coqqzzss.top should immediately ensure their systems and accounts are secure. This includes changing passwords on sensitive accounts, monitoring for unusual activity, and employing tools to detect and remove any malware that might have been downloaded in the process. It's crucial to remain vigilant for any unauthorized transactions or communications, and to report any findings to the appropriate authorities to prevent further exposure or damage. Being proactive in these measures will reduce the risk posed by such malicious domains and will aid in the overall cybersecurity posture of affected individuals.