coinbasewalletext[.]com

The domain coinbasewalletext.com was registered on April 28, 2025 through Sav.com, LLC and is currently taken offline. Infrastructure analysis shows it resolves to IP address 192.3.195.42, which is hosted in the United States under Autonomous System 36352 (HostPapa). The site presented an SSL certificate labeled R11 and returned the page title "Account Suspended" when accessed.

Gridinsoft assigned a trust score of 0 out of 100, indicating a lack of credibility. VirusTotal scans recorded 11 detections out of 93 security vendors, reinforcing the classification as a high‑risk crypto scam that impersonates the Coinbase brand. Blocklist monitoring confirms the domain is listed on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura.

While the domain is presently offline, the observed indicators suggest an active infrastructure that could be re‑used in future campaigns. Defenders should immediately add the domain and its resolved IP address to network deny lists, enforce DNS filtering using reputable blocklist sources, and monitor for any re‑registration attempts or similar domains targeting Coinbase users. Continuous vigilance of SSL certificate anomalies and rapid correlation with threat intel feeds will help mitigate potential resurgence of this impersonation campaign.