wallet-helpdesk[.]netlify[.]app

This domain, wallet-helpdesk.netlify.app, is flagged as a brand impersonation phishing resource specifically targeting Coinbase, a major cryptocurrency exchange platform. Analysis indicates the site was designed to replicate Coinbase's official support interface, as evidenced by the page title 'Coinbase Support,' with the intent to deceive users into disclosing sensitive account credentials or financial information. No specific drainer kit signatures were identified in initial scans, though the infrastructure aligns with common phishing toolkits used in cryptocurrency fraud campaigns. Infrastructure analysis reveals the following technical indicators: the domain resolves to IPv6 address 2a05:d014:58f:6200::259, hosted on Amazon.com, Inc. (AS16509) infrastructure in Germany. The SSL certificate is issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), a legitimate provider often exploited in phishing operations to lend false credibility. VirusTotal detection metrics show 19 out of 95 security vendors flagging the domain as malicious. The domain is registered through Netlify, a platform frequently abused for rapid phishing deployment. It appears on two security blocklists and is actively blocked by PhishDestroy and PhishingDB. No creation date was provided in available intelligence, though the domain's rapid takedown suggests recent deployment. Current status indicates the domain has been taken offline, likely following abuse reports or automated detection mechanisms. While the immediate threat is mitigated, residual risk remains due to potential reuse of the same infrastructure or registration patterns by threat actors. Users who may have interacted with this domain are advised to immediately revoke any active sessions, reset account credentials, and monitor for unauthorized transactions. Organizations should update internal blocklists with the domain and associated IP address to prevent future access attempts. The elevated risk level reflects the domain's direct targeting of financial services and high detection rate among security vendors.