premiumsupportcoinbase[.]site

This domain premiumsupportcoinbase.site was registered on 21 February 2026 and is currently taken offline. DNS resolution points to the IPv6 address 2a02:4780:43:cf2a:cf55:9bf8:e7b7:b6f, which belongs to AS47583 Hostinger International Limited and is served through Hostinger’s CDN. The web server was observed delivering content built with the React framework and supporting HTTP/3, indicating a modern front‑end stack. The SSL certificate is listed with an R12 rating, confirming the presence of TLS but offering no indication of trustworthiness beyond encryption.

The page title retrieved from the site reads “Coinbase Premium Support – Download Mobile App,” directly referencing the Coinbase brand and suggesting a crypto‑related support lure. Google Safe Browsing classifies the URL as a social‑engineering threat, and the domain appears on a single security blocklist. PhishDestroy has already blocked the domain, and AlienVault OTX includes it in one threat‑intel pulse. VirusTotal scans show eight of ninety‑three security vendors flagging the domain, reinforcing the malicious assessment.

The site is categorized as a crypto scam and impersonates Coinbase, but the exact payload or credential‑harvesting mechanisms have not been publicly disclosed. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the same IPv6 host, and add the URL to internal phishing‑detection rules. Because the site is offline, real‑time analysis is limited; however, the combination of brand impersonation, malicious page title, multiple vendor detections, and inclusion on blocklists warrants elevated vigilance for any related phishing campaigns targeting Coinbase users.