signal[.]beboundles[.]xyz

The domain signal.beboundles.xyz is a phishing site engaged in brand impersonation targeting Coinbase users. It posed as a cryptocurrency airdrop scam under the guise of 'Boundless Signal Points Airdrop' but did not deploy a drainer kit. The site is currently taken offline, though it previously presented an elevated risk of credential theft and fraudulent cryptocurrency transactions.

Signal.beboundles.xyz was flagged by 2 of 95 VirusTotal security vendors, including Forcepoint ThreatSeeker and Gridinsoft, which assigned it a trust score of 0/100. The domain appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. Its creation date was February 21, 2026, and it resolved to the IP address 104.21.64.94, hosted on Cloudflare's network (AS13335) in the US. The SSL certificate was issued by WE1, and Scamadviser assigned it a trust score of 31/100.

Victims of signal.beboundles.xyz should immediately change any passwords used on the site, enable two-factor authentication on all cryptocurrency and financial accounts, and monitor for unauthorized transactions. If cryptocurrency was involved, revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. Report the phishing domain to Coinbase's security team and submit it to platforms like PhishTank or Google Safe Browsing for further blocking.