coinbasefinanze[.]com

Analysis of coinbasefinanze.com indicates the domain was registered on 2025-10-28 through Hostinger Operations UAB and is hosted on a Hostinger International Limited network (ASN 47583) terminating at IP 84.32.84.32 in Latvia. The domain resolves to this IP and serves a generic parking page whose title reads “Parked Domain name on Hostinger DNS system”. No TLS certificate is presented, confirming the absence of HTTPS support. Nameservers ns1.dns-parking.com and ns2.dns-parking.com further confirm the parking status.

VirusTotal scans have returned detections from seven of ninety-five security vendors, and the domain is listed on a single public blocklist, where it is marked as blocked by PhishDestroy. The domain is categorized as a “Crypto Scam” and explicitly impersonates the Coinbase brand. As of the report date the domain has been taken offline, but historical activity suggests it was used in brand-impersonation campaigns targeting cryptocurrency users. Current evidence does not reveal the presence of a phishing payload, credential‑stealing page, or additional infrastructure such as command‑and‑control servers.

Consequently, the full scope of the malicious operation remains unknown. Defenders should continue to monitor the domain’s DNS resolution and block any future resolution to the identified IP, incorporate the domain into threat‑intel feeds, and enforce existing URL filtering rules for Coinbase‑related traffic. Organizations that have previously blocked the domain via PhishDestroy should verify that their security controls remain effective, and incident response teams should treat any future sightings of the domain as suspicious activity linked to cryptocurrency fraud targeting Coinbase users.