# walletsupportcoinbase.online — MALICIOUS

> walletsupportcoinbase.online is a high-risk phishing domain impersonating Coinbase. Avoid interaction and verify URLs carefully to protect your assets.

## Summary
PhishDestroy identifies walletsupportcoinbase.online as an active phishing domain engaged in brand impersonation targeting Coinbase users. The site’s page title “Coming Soon” attempts to lure victims by feigning legitimacy while preparing malicious activity. This domain is considered high risk due to its intent to deceive users and potentially capture sensitive login or wallet information.

The domain resolves to IP address 198.185.159.145 and is registered through Squarespace Domains LLC, with a creation date of October 19, 2025. It has appeared on multiple security blocklists and is flagged by several antivirus engines, indicating a consensus among security vendors about its malicious nature. The infrastructure suggests use of common hosting services to quickly deploy fraudulent sites that mimic popular cryptocurrency platforms such as Coinbase.

Currently, walletsupportcoinbase.online remains active and continues to pose a threat to users seeking Coinbase support or wallet services. Users are strongly advised to avoid accessing this domain and to verify official Coinbase URLs through trusted channels. Organizations should consider blocking this domain at network level and educate users on detecting similar brand impersonation attempts to mitigate risk.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Target brand: Coinbase
- Page title: Coming Soon

## Domain Intelligence
- Registered: 2025-10-19 16:34:35
- Registrar: Squarespace Domains LLC
- Country: USA
- IP: 198.185.159.145
- Nameservers: ns-cloud-e1.googledomains.com ns-cloud-e2.googledomains.com ns-cloud-e3.googledomains.com ns-cloud-e4.googledomains.com

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "ESET", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content

### Page Text
Coming Soon walletsupportcoinbase.online We're under construction. Please check back for an update soon.

### External Links
- http://www.squarespace.com

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b149d-8049-765c-ad27-8ad32f62a84b.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/f1cac46b-5d3f-497e-b36f-a798e9e070cf
- PhishDestroy: https://phishdestroy.io/domain/walletsupportcoinbase.online/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/walletsupportcoinbase.online/
Last updated: 2026-03-14