bacoinoi[.]com

PhishDestroy has identified bacoinoi.com as a high-risk brand impersonation threat specifically targeting Coinbase, a major cryptocurrency exchange. This domain was registered with malicious intent and has now been taken offline, though its infrastructure remains a potential danger if reactivated. The site's title, 'Buy sell your cryptos and foreign exchange,' closely mimics legitimate financial platforms to trick users into entering sensitive information.

Analysis from VirusTotal reveals that 14 out of 95 security vendors flag this domain as malicious, and Google Safe Browsing specifically categorizes it as phishing. The domain was registered through Gname.com Pte. Ltd. on January 04, 2026, and resolves to IP address 104.21.31.22. It appears on three security blocklists and has no SSL certificate, further indicating a lack of legitimate security measures. These technical indicators collectively point to a sophisticated phishing operation designed to steal cryptocurrency credentials.

Users who may have interacted with this domain should immediately change their Coinbase passwords and enable two-factor authentication. Monitor accounts for unauthorized transactions and report any suspicious activity to Coinbase support. As this domain is offline, no further direct threat exists, but similar domains may arise—always verify URLs before entering credentials or financial information. PhishDestroy recommends using browser extensions that block known phishing sites and staying informed about evolving threats in the crypto space.