coinbase-china[.]xyz

Analysis of coinbase-china.xyz indicates a confirmed crypto scam impersonating Coinbase, with elevated risk due to brand exploitation. The domain was registered on February 21, 2026, and resolved to IP 192.252.180.21, hosted in Hong Kong under Integen, Inc. As of July 23, 2026, the domain is offline, but prior detections include 15 of 93 security vendors on VirusTotal flagging it as malicious, alongside a single entry on a security blocklist. The scam type is explicitly classified as a crypto scam, aligning with the impersonation of Coinbase, a known cryptocurrency exchange.

Defenders should treat this domain as compromised infrastructure, particularly given its association with a high-risk hosting provider and prior malicious activity. While the domain is currently inactive, historical resolution to 192.252.180.21 warrants monitoring for re-emergence or related subdomains.

No SSL or HTTP status data is available, and the exact content of the site remains unanalyzed. Blocking at the DNS or network level is recommended for organizations with exposure to cryptocurrency-related threats, and retrospective log analysis should prioritize connections to 192.252.180.21 during the domain's active period.