dash[.]identifications-coinbase[.]com

This report details the technical threat posed by the domain dash.identifications-coinbase.com. The page title, identifications-coinbase.com, combined with the impersonated brand Coinbase and the cryptocurrency scam type, indicates this site was designed to mimic a legitimate Coinbase identity verification page. The primary threat is credential harvesting and cryptocurrency theft, targeting users who believe they are submitting sensitive identification documents to a trusted exchange.

Technical analysis reveals the site was flagged by 15 out of 95 VirusTotal vendors. It was created on 2025-10-06 and registered through Dynadot LLC. The site resolves to IP address 199.59.243.228, hosted in the United States under AS16509 (Amazon.com, Inc.). The domain uses nameservers ns1.dyna-ns.net and ns2.dyna-ns.net, and has no SSL certificate. Specific security vendors flagging the threat include ADMINUSLabs, ChainPatrol, Criminal IP, alphaMountain.ai, and BitDefender.

The domain is currently offline, rendering the threat inactive. However, the high detection rate (15/95) and lack of SSL strongly indicate a malicious intent. The risk level is assessed as high due to the specific impersonation of a major cryptocurrency brand and the potential for data theft, though the immediate operational risk is mitigated by the site's offline status.