coinbase[.]com[.]support[.]services[.]kygxc4mhk1jzuhzb7cxlcuysdkymeko7fthn7vtozxgemxzvj8nv[.]grupocsiperu[.]com

This site, identified by its page title "Index of /", impersonates the Coinbase brand and is categorized as a cryptocurrency scam. The threat is that it poses as a legitimate Coinbase support domain to deceive users into providing sensitive financial information or credentials, potentially leading to cryptocurrency theft.

Technical evidence shows the domain was flagged by 9 out of 95 VirusTotal vendors, with detections from ChainPatrol, alphaMountain.ai, BitDefender, CyRadar, and ESET. It is hosted on IP address 173.214.172.194 in the US, assigned to AS19318 Interserver, Inc. The domain was created on 2026-02-21 and uses SSL certificate R13. It appears on one blocklist.

The site is currently DOWN/OFFLINE. GridinSoft trust rating is 0/100, and the DOM risk score is 78, indicating a high risk level. The combination of low trust, high risk score, and multiple security vendor flags confirms this is a malicious cryptocurrency phishing domain.