coinbase-securityportal[.]com

The domain coinbase-securityportal.com has been assessed as an elevated risk due to its role in brand impersonation. Specifically targeting Coinbase, this domain mimics legitimate login interfaces to deceive users into surrendering sensitive credentials. Such activities pose significant threats to user security and privacy, emphasizing the necessity for immediate attention and remediation.

On December 01, 2025, coinbase-securityportal.com was registered through CNOBIN INFORMATION TECHNOLOGY LIMITED. It resolves to the IP address 94.183.233.141, located in the United States under AS56971 Cloud. The absence of an SSL certificate further undermines trust in the domain's legitimacy. Analysis on VirusTotal indicates that 19 out of 95 security vendors have flagged this domain as malicious, underscoring its potential threat vector. Currently, the domain is offline and has been blocked by PhishDestroy. Additionally, it appears on one security blocklist, highlighting its recognition as a malicious entity.

To mitigate risks associated with this threat, users should be educated on recognizing phishing attempts and verifying domain authenticity before entering credentials. Organizations should employ email filtering solutions and domain monitoring tools to preemptively identify and block access to such domains. Regular updates to security blocklists and encouraging two-factor authentication for user accounts can further diminish the impact of similar threats.