dhauihdiash[.]sbs

This domain is classified as a high-risk brand impersonation threat specifically targeting Coinbase, a cryptocurrency exchange platform. The primary threat vector involves credential harvesting through fraudulent login interfaces designed to mimic legitimate Coinbase authentication portals. Analysis indicates the domain was actively used to deceive users into submitting sensitive account credentials, including usernames, passwords, and potentially multi-factor authentication codes, which could lead to unauthorized access and financial theft. Infrastructure analysis reveals the domain dhauihdiash.sbs was registered on December 08, 2025, through Global Domain Group LLC and resolves to the IP address 134.122.166.173, hosted within AS152194 (CTG Server Limited) in Japan. The domain appears on three security blocklists and is flagged by 17 out of 95 security vendors on VirusTotal as malicious. Google Safe Browsing categorizes it as phishing, and the domain lacks an SSL certificate, increasing the likelihood of detection by security controls. Additional blocking is enforced by at least three independent threat intelligence feeds. The page title observed during active scans was 'coinbase,' further confirming its intent to impersonate the legitimate platform. Mitigation measures should include immediate blacklisting of the domain and its associated IP address (134.122.166.173) across all network security controls, including firewalls, DNS filters, and email gateways. Security teams are advised to conduct retrospective log analysis to identify any internal systems that may have communicated with the domain or IP within the past 30 days. End-user awareness should be reinforced regarding the risks of brand impersonation, particularly in the context of cryptocurrency platforms, with emphasis on verifying domain authenticity and SSL certificate validity before entering credentials. Given the domain's current offline status, continuous monitoring for re-activation or migration to new infrastructure is recommended.