accounts[.]coinbase[.]property

The domain accounts.coinbase.property presents an elevated risk as a brand impersonation site specifically targeting Coinbase users. This threat type, crypto drainer, aims to trick visitors into revealing login credentials or connecting cryptocurrency wallets, leading to asset theft. The site was taken offline after detection, but similar domains may reappear.

PhishDestroy analysis reveals that accounts.coinbase.property was flagged by 11 out of 95 security vendors on VirusTotal, indicating broad recognition as malicious. Registered on October 26, 2024, through Porkbun LLC, the domain resolves to IP address 199.59.243.228. It appears on one security blocklist and had no SSL certificate, further signaling its fraudulent nature. The page title 'coinbase.property' directly impersonates the legitimate Coinbase brand to deceive users.

To stay safe, users should always verify URLs before entering credentials or connecting wallets. Never click on links from unsolicited emails or messages claiming to be from Coinbase. Use official channels to access your accounts, and report any suspicious domains to cybersecurity authorities. Enable two-factor authentication and consider using a hardware wallet for added protection against crypto drainers.