supportcoiinbase[.]wabitx[.]com

This domain, supportcoiinbase.wabitx.com, poses a direct threat as a brand impersonation site targeting Coinbase users. The page mimics Coinbase’s official support portal, presenting itself under the title 'Coinbase Support - 24/7 Customer Service | Buy and Sell Cryptocurrency.' Analysis indicates the site is designed to harvest login credentials or deploy crypto-draining malware, exploiting users who believe they are accessing legitimate customer service channels. The domain’s infrastructure and page content are engineered to deceive victims into entering sensitive account details, which can lead to unauthorized access or financial theft. Evidence confirms the malicious nature of this domain through multiple technical indicators. The domain was registered on June 13, 2025, via GMO Internet, Inc., and resolves to the IP address 172.245.14.131, hosted under AS36352 (HostPapa) in the United States. It lacks an SSL certificate, increasing the risk of data interception. Security vendors have flagged the domain on VirusTotal, with 15 out of 95 engines detecting it as malicious. Additionally, the domain appears on two security blocklists, further validating its classification as a phishing threat. Users who have visited supportcoiinbase.wabitx.com should take immediate action to mitigate potential risks. If credentials were entered, they must change their Coinbase password and enable multi-factor authentication on all accounts. Review recent transactions for unauthorized activity and report any suspicious behavior to the targeted platform. Devices used to access the site should be scanned for malware, and browser sessions should be cleared to remove any stored data. Avoid further interaction with the domain, as it has been taken offline but may reappear under a different address.