# coinbasesupportsshelp.forum — SUSPICIOUS

> coinbasesupportsshelp.forum is a crypto drainer impersonating Coinbase. The domain was flagged by 2/95 VirusTotal scanners and is active since March 2026.

## Summary
PhishDestroy categorizes coinbasesupportsshelp.forum with an elevated risk level due to active brand impersonation targeting Coinbase users. This domain is designed to mimic Coinbase’s support forums and harvest credentials or initiate crypto drainer attacks.

This domain was flagged by 2 out of 95 VirusTotal security vendors and is registered through Name.com, Inc. It resolves to 34.111.179.208 and was created on March 20, 2026. The infrastructure leverages a Let’s Encrypt SSL certificate, a common tactic to lend false legitimacy to phishing portals.

Users should avoid interacting with this domain or any links associated with it. Validate URLs using PhishDestroy’s real-time scanning tool before submission. If compromised, revoke connected wallet permissions and rotate passwords immediately. Block this IP (34.111.179.208) at the firewall level and report the domain to Coinbase’s abuse team to mitigate further exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Coinbase

## Domain Intelligence
- Registered: 2026-03-20 14:11:31
- Registrar: Name.com, Inc.
- IP: 34.111.179.208

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/coinbasesupportsshelp.forum
- PhishDestroy: https://phishdestroy.io/domain/coinbasesupportsshelp.forum/
- LLM endpoint: https://phishdestroy.io/domain/coinbasesupportsshelp.forum/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbasesupportsshelp.forum/
Last updated: 2026-03-20