ww25[.]coinbasecrypotaccount[.]comww38[.]coinbasecrypotaccount[.]com

PhishDestroy identified the domain ww25.coinbasecrypotaccount.com as an elevated-risk brand impersonation threat targeting Coinbase. This fake website was created to deceive users into believing they are on a legitimate Coinbase platform, likely aiming to steal login credentials and drain cryptocurrency wallets. The page title 'coinbasecrypotaccount.com' reinforces the deceptive branding.

Technical analysis reveals that the domain was created on September 24, 2025, and registered through Tucows Domains Inc. It resolves to IP address 199.59.243.228 with no SSL certificate, increasing the risk of data interception. VirusTotal flags this domain with a score of 14 out of 95 security vendors, and it appears on one security blocklist. Google Safe Browsing status is not indicated, but the domain is listed on at least one blocklist.

The domain is currently offline, having been taken down after PhishDestroy's investigation. Despite its inactive status, the threat remains significant due to its sophisticated impersonation of Coinbase. Users should exercise caution and always verify URLs through official channels or PhishDestroy's database before entering any sensitive information.