official-coinbase-help[.]com

This domain, official-coinbase-help.com, is flagged as a high-risk brand impersonation threat targeting Coinbase users. Analysis indicates the domain was created to mimic legitimate Coinbase support channels, presenting itself as the "Coinbase – Official Support Centre" to deceive victims into disclosing login credentials, recovery phrases, or other sensitive authentication details. No direct association with cryptocurrency drainer kits has been confirmed, but the infrastructure aligns with credential-harvesting campaigns commonly used to facilitate unauthorized account access and subsequent asset theft.

Infrastructure analysis reveals the domain was registered on January 21, 2026, through HOSTINGER operations, UAB, and resolves to IP address 82.29.199.91, hosted by AS47583 (Hostinger International Limited) in the United States. The domain lacks an SSL certificate, increasing the likelihood of interception or manipulation of user-submitted data. VirusTotal detection rates show 17 out of 95 security vendors flagging the domain as malicious. It appears on three security blocklists, including PhishDestroy and MetaMask’s threat intelligence feeds, and is actively blocked by SEAL. No Google Safe Browsing (GSB) listing was observed at the time of analysis, though this may reflect detection latency rather than benign status.

As of the latest verification, official-coinbase-help.com has been taken offline, likely due to registrar enforcement or hosting provider intervention. However, residual risk persists due to potential domain reactivation, DNS cache persistence, or re-registration under a similar name. Organizations and users are advised to block the domain and its associated IP (82.29.199.91) at the network perimeter, update endpoint protection signatures, and monitor for phishing attempts referencing "Coinbase Support" or similar variants. Users who may have interacted with the domain should immediately revoke active sessions, rotate credentials, and enable multi-factor authentication on all cryptocurrency exchange accounts.