cbhep-coinbase[.]com

The domain cbhep-coinbase.com is assessed as a high-risk brand impersonation threat. It specifically targets users of the cryptocurrency exchange Coinbase, aiming to deceive individuals into divulging sensitive information or performing unauthorized transactions.

Analysis indicates that this domain is currently offline and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 91.92.241.15 and was created on January 08, 2026. According to VirusTotal, 11 out of 95 security vendors have flagged this domain as malicious. Additionally, the domain appears on three security blocklists, further underscoring its potential threat. The SSL certificate is identified as R13, which may have been used to create a false sense of security among users. The trust score of this domain is low, as evidenced by the multiple flags and blocklists.

To mitigate the risks associated with this domain, users are advised to exercise caution when interacting with any URLs or emails that appear to be from Coinbase but lead to cbhep-coinbase.com. Organizations should update their security policies to include this domain in blocklists and train users to recognize and report such impersonation attempts. Implementing DNS-based filtering and using multi-factor authentication can also significantly reduce the likelihood of successful phishing attacks. Regularly monitoring for similar domain registrations and taking swift action to report and block them is crucial in protecting against brand impersonation threats.