asjghxv[.]asgjxvzv[.]bordercottages[.]com

The domain asjghxv.asgjxvzv.bordercottages.com has been identified as a brand impersonation threat targeting Coinbase. Currently, this domain is offline but previously hosted content misleading enough to impersonate the legitimate Coinbase platform, as evidenced by its page title: 'Coinbase'. The threat was categorized as elevated due to its potential impact on users who might be deceived into providing sensitive information under the guise of interacting with a trusted financial service.

From a technical inspection, this domain was flagged by 13 out of 95 security vendors on VirusTotal, indicating a significant recognition of its malicious nature. The domain, registered through Gname.com Pte. Ltd., resolved to the IP address 135.235.197.92 prior to being taken offline. It was created on May 29, 2026, and is listed on one security blocklist. The trust score assigned by Gridinsoft is 0 out of 100, reinforcing its malicious classification. The hosting server was identified as using Apache HTTP Server.

While the domain is currently offline, it is recommended to remain vigilant for similar threats and ensure robust protective measures are in place. Continued monitoring of threat intelligence feeds and employing security solutions capable of identifying and blocking such domains can help mitigate risks. Organizations should also educate users on recognizing phishing attempts to prevent credential compromise.