millersportal[.]com

PhishDestroy has identified millersportal.com as a brand impersonation phishing site targeting Coinbase users. The domain is currently offline, but while active it posed a significant threat to cryptocurrency holders by mimicking Coinbase's secure portal interface. The page title, "Secure Claim Portal — Complete Your Fund Claim," was designed to trick users into entering sensitive financial information under the guise of processing a fund claim.

Technical analysis reveals concerning indicators of malicious intent. The domain was flagged by 7 out of 95 VirusTotal vendors and appears on 6 security blocklists. Registered through NiceNIC International Group Co., Limited on February 21, 2026, it resolves to IP address 104.21.54.39 and lacks an SSL certificate, which is unusual for any legitimate financial portal. AlienVault OTX includes this domain in one threat intelligence pulse, confirming its association with phishing campaigns. These factors combined indicate a high likelihood of fraudulent activity.

Although millersportal.com has been taken offline, users who may have interacted with this site should take immediate precautions. PhishDestroy recommends changing any passwords or credentials entered on the site, enabling two-factor authentication on Coinbase accounts, and monitoring accounts for unauthorized transactions. Always verify URLs before entering sensitive data, and report any suspicious domains to security researchers or blocklist providers. Staying vigilant against brand impersonation schemes is critical in protecting digital assets.