secureblockhub[.]cfd

The domain secureblockhub.cfd is a phishing site engaged in brand impersonation targeting Coinbase users. It presents itself as a cryptocurrency service under the false identity 'Web3connectvault - A Digital encrypted asset Place' to deceive victims into disclosing login credentials or transferring digital assets. No drainer kit was identified, but the site poses an elevated risk due to its fraudulent representation of a trusted brand. As of the latest verification, secureblockhub.cfd has been taken offline.

Technical indicators confirm the malicious nature of secureblockhub.cfd. The domain was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and Seclookup, and appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. It was registered on August 13, 2025, through Global Domain Group LLC and resolves to the IP address 176.9.7.179, hosted by Hetzner Online GmbH in Germany (AS24940). The SSL certificate is issued by R10, and trust scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively. Google Safe Browsing has not flagged the domain.

Individuals who interacted with secureblockhub.cfd should immediately change their Coinbase passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious transactions and report any fraudulent activity to Coinbase support. Victims should also report the domain to their local cybercrime unit or platforms like the FBI’s Internet Crime Complaint Center (IC3) or the Anti-Phishing Working Group (APWG). If cryptocurrency was transferred, document all transaction details for potential recovery efforts.