nib--ghana[.]com

This domain, nib--ghana.com, poses a significant threat as a brand impersonation scam designed to exploit users of the Coinbase cryptocurrency platform. Analysis indicates the site mimics Coinbase’s branding, including the use of the term 'JPcoinbase' in its page title, alongside misleading claims such as 'AI Powered Crypto.' Such tactics are commonly employed to lure victims into entering sensitive credentials, transferring funds, or interacting with malicious smart contracts, often resulting in financial loss or unauthorized access to crypto wallets. The domain’s infrastructure and content are engineered to create a false sense of legitimacy, targeting individuals who may not scrutinize the URL or verify the authenticity of the platform. Infrastructure analysis reveals multiple red flags confirming the malicious nature of this domain. It was registered on June 20, 2025, through ENOM, INC., a registrar frequently associated with fraudulent domains due to its accessibility and lack of stringent verification processes. The domain resolves to the IP address 194.36.191.196, hosted under AS60117 (Host Sailor Ltd), an autonomous system with a history of harboring high-risk infrastructure. Security vendors have flagged the domain in 18 out of 95 scans on VirusTotal, a clear indicator of its malicious intent. Additionally, the absence of an SSL certificate further undermines any semblance of trustworthiness, as modern secure websites universally employ encryption to protect user data. Individuals who have visited nib--ghana.com or interacted with its content should take immediate action to mitigate potential risks. First, cease all interactions with the domain and avoid entering any personal or financial information. If credentials or wallet details were provided, users should assume their accounts are compromised and take steps to secure them, such as changing passwords, enabling multi-factor authentication, and revoking access to any connected applications. For crypto wallet users, it is critical to check for unauthorized transactions and transfer remaining assets to a new, secure wallet. Victims should also monitor their financial accounts for suspicious activity and consider reporting the incident to relevant cybersecurity authorities or consumer protection agencies. Proactive measures, such as using browser-based security tools to block known malicious domains, can help prevent future exposure to similar threats.