coinbasecustomercarenumberjkw[.]statuspage[.]io

Coinbasecustomercarenumberjkw.statuspage.io is a deceptive domain designed to impersonate Coinbase, targeting users with cryptocurrency scams. The domain is flagged by six out of 95 vendors on VirusTotal, indicating a significant threat level. It is also listed on one public blocklist and flagged by Google Safe Browsing, reinforcing its malicious nature.

The domain's page title, "Coinbase Customer Care Number +1(818)962(7015)=Phone USa Help Status," suggests a fraudulent customer support service. This tactic aims to exploit users seeking assistance, potentially leading them to divulge sensitive information. The site also references brands like Google and Slack, possibly to lend credibility to its deceptive operations.

Despite being taken down, the domain's creation date in 2012 and detection by PhishDestroy in November 2025 highlight its long-standing presence and recent malicious activity. Hosted on an IP address in Germany by Amazon.com, Inc., the domain uses an SSL certificate issued by Amazon, which might mislead users into believing it is secure.

Phishing domains like this exploit the gap between registration and detection by antivirus databases, targeting users during this vulnerable period. PhishDestroy's upstream detection pipeline captures such threats early, providing crucial protection before they propagate widely. The platform risk score of 30/100 underscores the need for ongoing vigilance against similar threats.