cashappsupportdeskassit[.]com[.]coinbasesupportdeskchat[.]com

This domain, cashappsupportdeskassit.com.coinbasesupportdeskchat.com, is flagged as an elevated-risk brand impersonation threat targeting Coinbase users. Registered on December 18, 2025, through Dynadot LLC, the domain resolves to IP address 198.251.83.119, hosted under AS53667 FranTech Solutions in the United States. Infrastructure analysis reveals the use of nameservers ns25.my-control-panel.com and ns26.my-control-panel.com, a configuration commonly associated with low-cost or bulletproof hosting environments. The domain currently lacks an SSL certificate, increasing the risk of unencrypted data interception.

At the time of assessment, the site returned an HTTP status indicating an 'Index of /' directory listing, suggesting either misconfiguration or an incomplete deployment. Security vendors have detected this domain, with 7 of 95 engines on VirusTotal flagging it as malicious. It appears on at least one security blocklist and is blocked by PhishDestroy, while Gridinsoft assigns a trust score of 0/100, reinforcing its classification as a crypto scam. The domain has since been taken offline, though its infrastructure remains a potential vector for future malicious activity.

Defenders should monitor for re-registration or re-deployment under similar naming conventions, particularly those mimicking Coinbase support channels. Given the lack of SSL and the use of directory listing, any interaction with this domain—even while offline—should be treated as high-risk. Further investigation into the hosting provider and nameserver patterns may reveal additional related threats.