investigation-workspace[.]com

This domain, investigation-workspace.com, is actively engaged in credential theft by impersonating Coinbase, a major cryptocurrency exchange platform. Visitors to this site are presented with a fraudulent login interface mimicking Coinbase's official sign-in page, designed to harvest user credentials. If entered, these credentials could be exploited to gain unauthorized access to victims' cryptocurrency wallets, leading to potential financial losses. The threat is classified as high-risk due to the direct targeting of sensitive financial information and the domain's active status. Analysis indicates that investigation-workspace.com was registered on March 24, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu. The domain resolves to the IP address 31.76.28.16 and currently holds a valid SSL certificate issued by Let's Encrypt, which may lend an appearance of legitimacy to unsuspecting users. As of the latest assessment, the domain has not been flagged by any of the 95 security vendors on VirusTotal, indicating it may still evade detection by some security tools. Google Safe Browsing has flagged the domain under the category SOCIAL_ENGINEERING, further confirming its deceptive nature. If you or someone you know has visited investigation-workspace.com and entered login credentials, immediate action is required to mitigate potential risks. First, cease all interaction with the domain and avoid clicking any links or downloading files from it. Next, change the passwords for any accounts that may have been exposed, starting with the Coinbase account and any other platforms where the same credentials were reused. Enable multi-factor authentication (MFA) on all critical accounts to add an additional layer of security. Monitor account activity closely for any unauthorized transactions or suspicious logins. If financial loss is suspected, report the incident to relevant financial institutions and consider filing a report with local cybercrime authorities to aid in tracking and mitigating the threat.