sadmin[.]coinbso[.]club

As of July 24, 2026, the domain sadmin.coinbso.club has been identified as a potential phishing site targeting users of the cryptocurrency platform CoinBase. The domain was registered through 22net, Inc. and created on November 20, 2025. Infrastructure analysis reveals that the domain resolves to the IP address 45.195.54.245, which is located in Hong Kong and associated with the Autonomous System AS132813 HK AISI CLOUD COMPUTING LIMITED. The domain is currently offline, having been taken down, which may indicate that it was used for a short-lived phishing campaign or that the hosting service took action against it.

Security vendors have flagged this domain, with 12 out of 95 vendors identifying it as a threat, suggesting that it poses an elevated risk to users. The domain appears on one security blocklist and has a Gridinsoft trust score of 0 out of 100, further indicating its malicious nature. The exact content and purpose of the site have not been analyzed, but given the domain's name and the security vendor detections, it is likely that the site was designed to mimic CoinBase's administrative or login pages to steal user credentials. Defenders and security teams are advised to block this domain and educate users about the risks of phishing sites, particularly those impersonating well-known cryptocurrency platforms.

The lack of an SSL certificate may also be a red flag for users, as legitimate sites typically use HTTPS to secure connections. The domain's nameservers are ns1.22.cn and ns2.22.cn, which are managed by 22net, Inc. The domain is blocked by PhishDestroy, a security service that helps prevent access to known phishing sites. Given the current offline status, it is recommended to monitor the domain for any resurfacing activity and to continue blocking it to ensure user safety.