dejitarutsukas[.]xyz

The domain dejitarutsukas.xyz, impersonating Coinbase, has a high threat score of 71/100 and is currently down. VirusTotal reports that 2 out of 95 security vendors, including alphaMountain.ai and Forcepoint ThreatSeeker, have flagged this domain as malicious. It is also listed on 2 public blocklists, although Google Safe Browsing has not flagged it.

Registrar information is not available, indicating potential use of privacy protection. The domain was created on 2026-02-21 and was first seen on 2026-02-26. Given its high threat score and detection by multiple vendors, block this domain at the perimeter and monitor the associated IP, 2a06:98c1:3121::3, as an indicator of compromise.