sicherheitsabteilung-coinbase[.]com

sicherheitsabteilung-coinbase.com is a brand impersonation phishing domain targeting Coinbase, posing a specific threat to cryptocurrency users by attempting to steal login credentials or sensitive account information. The domain is currently taken offline, and no drainer kit was identified. This domain is not safe and should be considered a confirmed scam.

Technical indicators show that sicherheitsabteilung-coinbase.com was flagged by 6 of 95 VirusTotal vendors, including ChainPatrol, alphaMountain.ai, and CyRadar, but was not flagged by Google Safe Browsing. The domain appears on 1 security blocklist (PhishDestroy). It was registered through Dynadot LLC on December 22, 2025, and resolves to IP address 199.59.243.228, hosted in the US on AS16509 Amazon.com, Inc. No SSL certificate was issued. The page title observed was sicherheitsabteilung-coinbase.com, and MX records point to webhost.dynadot.com with nameservers ns1.dyna-ns.net and ns2.dyna-ns.net.

To protect against this phishing threat, users who may have interacted with sicherheitsabteilung-coinbase.com should immediately change any passwords used on the site and enable two-factor authentication on their Coinbase account. Monitor for unauthorized transactions or account access. Since no drainer kit was found, token approval revocation is not necessary, but users should remain vigilant for any suspicious activity. Report the domain to Coinbase's security team and to PhishDestroy to help block future threats.