admiralsglobal[.]net

The domain admiralsglobal.net was a phishing site engaged in brand impersonation targeting Coinbase users. It posed as the legitimate cryptocurrency exchange to deceive victims into disclosing login credentials or sensitive account information, classifying it as a cryptocurrency-related scam. As of the latest verification, admiralsglobal.net has been taken offline and no drainer kit was detected.

Technical indicators confirm the elevated risk level. The domain was flagged by 3 of 95 VirusTotal security vendors, including CRDF, Gridinsoft, and Netcraft, while appearing on 1 security blocklist (PhishDestroy). It was registered through Hosting Concepts B.V. d/b/a Registrar.eu on March 14, 2025, and resolved to the IP address 86.107.77.165, hosted under AS216395 (HostBet Cloud Technologies Private Limited) in Germany. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'admiralsglobal.net'. Gridinsoft and Scamadviser both assigned a trust score of 1 out of 100, further indicating malicious intent. Technologies detected on the site included Sentry, Bootstrap, LiteSpeed, and jQuery, among others.

Individuals who interacted with admiralsglobal.net should immediately change their Coinbase passwords and enable two-factor authentication (2FA) if they entered credentials. Monitor accounts for unauthorized transactions or suspicious activity. Victims are advised to report the phishing domain to Coinbase's security team and submit abuse reports to the registrar (Registrar.eu) and hosting provider. Additionally, consider reporting the incident to local cybercrime authorities or platforms like the FBI's IC3 or the FTC.