qfs1776spacex[.]com

This domain, qfs1776spacex.com, poses a significant threat through brand impersonation, specifically targeting the cryptocurrency platform Coinbase. The domain was designed to deceive users into believing they were interacting with a legitimate Coinbase service, potentially leading to the theft of sensitive information such as login credentials and personal data.

Analysis indicates that qfs1776spacex.com was flagged by 3 out of 95 security vendors on VirusTotal, suggesting a moderate level of recognition within the security community. The domain was registered through HOSTINGER operations, UAB, and was created on February 21, 2026. It appears on one security blocklist and was blocked by PhishDestroy. The domain resolved to the IP address 159.195.9.211 and was detected using technologies such as LiteSpeed, Alpine.js, and Smartsupp. Additionally, the domain was mentioned in one threat intelligence pulse on AlienVault OTX.

If users visited qfs1776spacex.com, they are advised to immediately change their Coinbase account passwords and enable two-factor authentication (2FA) if not already active. Users should also monitor their accounts for any unauthorized activity and report any suspicious incidents to Coinbase support. It is crucial to remain vigilant and verify the URL of any website before entering sensitive information.