coinbasesupportfixwindow[.]feltis[.]sbs

This domain, coinbasesupportfixwindow.feltis.sbs, is actively impersonating Coinbase, a major cryptocurrency exchange platform. The site is designed to deceive users into believing they are interacting with legitimate Coinbase support services, potentially leading to unauthorized access to cryptocurrency wallets or the theft of sensitive login credentials. The page title explicitly mimics Coinbase Support, increasing the likelihood of successful social engineering attacks against unsuspecting users. Analysis indicates this domain was registered on June 14, 2026, through Atak Domain, a registrar frequently associated with malicious infrastructure. The domain resolves to the IP address 86.107.77.210 and employs a Let's Encrypt SSL certificate to appear legitimate. As of the latest scan, 4 out of 95 security vendors on VirusTotal have flagged this domain as malicious. Additionally, Google Safe Browsing has classified the site under SOCIAL_ENGINEERING, further confirming its deceptive nature. If you or someone you know has visited coinbasesupportfixwindow.feltis.sbs, immediate action is required. Disconnect the affected device from the internet to prevent further data transmission. Clear all browser data, including cookies and cached files, to remove any stored session tokens. Run a full system scan using updated security tools to detect and remove potential malware. Change all passwords associated with cryptocurrency accounts, particularly Coinbase, using a trusted device. Enable multi-factor authentication (MFA) if not already active. Monitor financial accounts for unauthorized transactions and report any suspicious activity to the relevant platform. Users should also consider revoking access to any connected third-party applications linked to their cryptocurrency wallets.