coinbasepremiumsupport[.]site

This domain, coinbasepremiumsupport.site, is actively engaged in brand impersonation targeting Coinbase, a major cryptocurrency exchange platform. The site is designed to deceive users into believing they are interacting with legitimate Coinbase support or premium services, potentially leading to unauthorized access to sensitive account information, financial loss, or exposure to malicious payloads such as crypto drainers. The domain poses an elevated risk due to its recent creation, lack of SSL certification, and association with known phishing infrastructure, which may facilitate credential harvesting or the distribution of malware under the guise of trusted brand communication. Analysis indicates that coinbasepremiumsupport.site was registered on September 20, 2025, through HOSTINGER operations, UAB, a registrar frequently utilized in phishing campaigns. The domain resolves to the IP address 84.32.84.32, located in Lithuania and associated with AS47583 (Hostinger International Limited). At the time of assessment, the domain appears on one security blocklist and is flagged by 12 out of 95 security vendors on VirusTotal, a detection rate consistent with active phishing operations. The page title, 'Parked Domain name on Hostinger DNS system,' suggests an attempt to mimic legitimate parking pages while potentially concealing malicious redirects or cloaked content intended for targeted victims. Users who have visited coinbasepremiumsupport.site should take immediate action to mitigate potential risks. If any credentials, personal information, or financial details were entered on the site, affected accounts should be secured by changing passwords and enabling multi-factor authentication where available. All connected devices should be scanned for malware using updated security tools to detect any potential infections. Additionally, users are advised to monitor their cryptocurrency wallets and financial accounts for unauthorized transactions. Given the domain’s recent registration and active phishing indicators, vigilance is recommended when interacting with any communications or links claiming affiliation with Coinbase, particularly those directing to non-official domains.