dss-hw-scan[.]coinbase[.]com[.]lc

This domain, dss-hw-scan.coinbase.com.lc, presented a page title of "coinbase.com.lc" and impersonated the Coinbase brand. The site was classified as a cryptocurrency scam, posing a threat by attempting to deceive users into believing it was a legitimate Coinbase service, likely to harvest credentials or cryptocurrency assets.

Technical evidence confirms the threat. VirusTotal flagged the domain with 15 out of 95 security vendors, including ADMINUSLabs, ChainPatrol, BitDefender, Chong Lua Dao, and CyRadar. Google Safe Browsing flagged it for SOCIAL_ENGINEERING. The domain was registered using registrar AMAZO-4 (ASN 16509), hosted on IP 75.2.18.233 in the United States (AS16509 Amazon.com, Inc.), and used an SSL certificate issued by Let's Encrypt (R13). The GridinSoft trust rating is 0 out of 100, and the Domain Risk Score is 10.

The site is currently down or offline. Based on the threat intelligence data, the risk level is high, with evidence of social engineering and widespread flagging by multiple security vendors and blocklists.