aid[.]fuipwbeyrp[.]my

The domain aid.fuipwbeyrp.my is a confirmed phishing site engaged in brand impersonation targeting Coinbase users. It presents itself as the legitimate cryptocurrency exchange to deceive victims into disclosing login credentials or sensitive account information, classified as a cryptocurrency scam. As of the latest verification, aid.fuipwbeyrp.my has been taken offline.

Technical indicators confirm the malicious nature of aid.fuipwbeyrp.my. The domain was registered on 2025-07-29 07:38:20 through NameSilo, LLC and resolves to the IP address 172.67.190.171, hosted on Cloudflare's network (AS13335). Detection rates include 2 of 95 VirusTotal security vendors, specifically Kaspersky and SOCRadar, while it appears on 1 security blocklist (PhishDestroy). The site lacks an SSL certificate, and its nameservers are byron.ns.cloudflare.com and molly.ns.cloudflare.com. The observed page title was 'Coinbase', reinforcing its impersonation of the legitimate platform. Gridinsoft assigned a trust score of 0/100 to aid.fuipwbeyrp.my.

Victims who interacted with aid.fuipwbeyrp.my should immediately change their Coinbase passwords and enable two-factor authentication (2FA) if not already active. Monitor accounts for unauthorized transactions or suspicious activity, and report any fraud to Coinbase support. Additionally, the domain can be reported to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts. Users should remain vigilant for similar phishing attempts targeting cryptocurrency platforms.