apps[.]coin-base-assist[.]com

The domain apps.coin-base-assist.com has been identified as a brand impersonation phishing site specifically targeting Coinbase users. Currently offline, this domain was created on January 7, 2025, and was designed to mimic the Coinbase Assist Center to steal login credentials and other sensitive information. The threat type is confirmed phishing with a high risk level, and the domain is now inactive.

PhishDestroy analysis reveals that this domain was flagged by 10 out of 95 VirusTotal security vendors, indicating a strong consensus on its malicious nature. It also appears on one security blocklist and is listed as phishing by Google Safe Browsing. The domain was registered through Hosting Concepts B.V. d/b/a Registrar.eu and resolved to IP address 35.204.150.5. No SSL certificate was found, further confirming its fraudulent intent. The page title 'Assist Center' was used to deceive users into believing they were accessing legitimate Coinbase support.

Given that the domain is now offline, the immediate risk is mitigated, but users who may have interacted with it should change their Coinbase passwords and enable two-factor authentication immediately. It is also advisable to monitor accounts for unauthorized activity and report any suspicious transactions. PhishDestroy recommends always verifying URLs before entering credentials and using official Coinbase channels for support. Stay vigilant against similar phishing attempts that may arise in the future.