help-coinbase[.]info

The domain help-coinbase.info was registered on February 21, 2026 and is presently taken offline. DNS resolution points to the IP address 84.32.84.32, which belongs to Hostinger International Limited in Lithuania (AS47583). An SSL certificate identified as R13 is present on the host, but the page title returned by the server is "Parked Domain name on Hostinger DNS system," indicating that no active content was observed at the time of analysis. The domain is classified as a crypto scam that impersonates the Coinbase brand, consistent with the known brand target and scam type.

Reputation scoring from Gridinsoft assigns a zero‑out‑of‑one‑hundred trust score, and the domain appears on a single security blocklist. PhishDestroy has already blocked the domain, and VirusTotal reports that 7 of 93 scanned security vendors flagged it as malicious. AlienVault OTX lists the domain in 44 distinct threat‑intel pulses, reinforcing its association with malicious campaigns. The combination of a newly created domain, low trust score, multiple vendor detections, and inclusion in OTX pulses suggests a deliberate attempt to lure cryptocurrency users by leveraging the Coinbase name.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms, as the hosted page appears only as a parked domain and no further content has been captured. Defenders should continue to block the IP address 84.32.84.32, add the domain to internal deny lists, and monitor for any future re‑activation. Organizations should educate users about the risk of unsolicited links referencing Coinbase and enforce multi‑factor authentication on all cryptocurrency accounts to mitigate potential credential theft.