# coinbaselive.support — MALICIOUS

> coinbaselive.support mimics Coinbase support to deceive users. Learn why this domain is risky and how to protect your assets.

## Summary
PhishDestroy identifies coinbaselive.support as a high-risk domain impersonating Coinbase's customer support. This fraudulent site aims to deceive users into believing they are interacting with the legitimate Coinbase help center, potentially leading to credential theft or financial loss. Brand impersonation attacks like this are critical threats as they exploit user trust in well-known companies.

The domain coinbaselive.support was created recently on February 21, 2026, and remains active. It resolves to the IPv6 address 2600:1901:0:84ef:: and has been flagged by 16 out of 95 security vendors on VirusTotal, in addition to appearing on two known security blocklists. Its page title attempts to mirror the official Coinbase support site, increasing the risk of user deception.

Users should exercise extreme caution and avoid interacting with this domain. Official support channels for Coinbase should be accessed only through verified URLs or official apps. If you encounter coinbaselive.support, do not provide personal information or login credentials. Reporting this site to security teams and using trusted security tools can help mitigate risks associated with such brand impersonation threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Target brand: Coinbase
- Page title: Coinbase Customer Support Help Center | Coinbase customer support

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 2600:1901:0:84ef::
- SSL Issuer: E7

## Detection Status
- VirusTotal: 16 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Seclookup", "SOCRadar", "Sophos", "Trustwave", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b78bf-198b-73e8-a033-b0183842a9b7.png
- PhishDestroy: https://phishdestroy.io/domain/coinbaselive.support/
- LLM endpoint: https://phishdestroy.io/domain/coinbaselive.support/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbaselive.support/
Last updated: 2026-03-19