coastmetasset[.]com

This domain, coastmetasset.com, poses as a legitimate Ethereum wallet service under the false identity 'Coast Meta Asset.' Analysis indicates it is designed to deceive users into entering sensitive credentials, such as private keys or recovery phrases, which attackers can then exploit to gain unauthorized access to cryptocurrency funds. The site mimics the branding and interface of official Ethereum platforms, increasing the likelihood of successful social engineering attacks against unsuspecting users. Infrastructure analysis reveals multiple indicators of malicious intent. The domain was registered on May 20, 2024, through Cosmotown, Inc., a registrar frequently associated with suspicious domains. It resolves to the IP address 163.61.188.5, hosted under AS153568 (NEW DHAKA HARDWARE), an autonomous system with a history of hosting phishing infrastructure. Security vendors have flagged the domain, with 2 out of 95 engines on VirusTotal detecting it as malicious. Additionally, it appears on one security blocklist, and its SSL certificate is identified as a default TRAEFIK certificate, which is commonly used in hastily deployed phishing campaigns. If a user has interacted with coastmetasset.com, immediate action is required to mitigate potential risks. First, cease all further interaction with the site and avoid entering any credentials or personal information. Users who have already submitted sensitive data, such as private keys or seed phrases, should transfer any remaining funds from the associated cryptocurrency wallets to new, secure wallets immediately. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where possible. Reporting the domain to relevant security organizations and cryptocurrency platforms can help prevent further victimization.