coinbaseset[.]com

This domain, coinbaseset.com, is identified as an active phishing site specializing in brand impersonation targeting Coinbase. The threat type involves presenting a fraudulent webpage titled '首頁 - Coinbase,' designed to deceive users into entering sensitive credentials by mimicking the legitimate Coinbase platform. As of the latest assessment, the domain remains operational and poses a high risk to unsuspecting users. Analysis indicates the domain was registered on May 21, 2026, through NameSilo, LLC, and resolves to the IP address 192.252.183.244, hosted by Integen, Inc in the United States. Security vendors have flagged this domain in 3 of 95 VirusTotal scans, and it appears on three distinct security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt (R13), a detail that may lend a false sense of legitimacy to the site. Infrastructure analysis reveals the domain's creation date is unusually set in the future, a common tactic to evade initial detection during registration checks. The current status of coinbaseset.com remains active, with no indications of takedown or mitigation efforts. Users and organizations are advised to block the domain at the network level and add the IP address 192.252.183.244 to firewall deny lists. Security teams should monitor for any attempts to access this domain within their environments and conduct retrospective analysis to identify potential credential exposure. End-users should be educated on recognizing impersonation attempts, particularly those involving non-standard domain names or unexpected language settings on login pages.