customersupportdesk[.]coinbase[.]supportcentersdesks[.]com

The domain customersupportdesk.coinbase.supportcentersdesks.com is assessed as a brand impersonation phishing infrastructure targeting Coinbase users. Analysis indicates it is designed to mimic official customer support workflows under a deceptive subdomain structure, with the objective of harvesting login credentials, account recovery details, and potentially financial authorization data. The domain is currently classified as brand_impersonation and is taken offline, indicating either enforcement takedown or infrastructure disruption after active abuse.

Technical indicators show significant malicious consensus: the domain is flagged by 18/95 VirusTotal security vendors, demonstrating multi-engine detection alignment. Infrastructure analysis reveals hosting via Contabo GmbH (AS51167) with resolution to IP address 173.212.242.11 located in FR. The domain was registered through NameSilo, LLC and created on December 20, 2025. It appears on 1 security blocklist, and lacks a valid SSL certificate, which further reduces trustworthiness and indicates weak or absent transport-layer protection. The page title observed as “Coinbase Help” reinforces its impersonation intent.

Although the domain is currently offline, its prior configuration and distribution signals indicate high residual risk due to potential replication or redeployment under similar naming patterns. Users who may have interacted with the domain should assume possible credential compromise, immediately reset passwords for affected accounts, enable multi-factor authentication, and review account access logs for unauthorized activity. Any submitted personal or authentication data should be considered exposed, and additional monitoring for follow-on phishing attempts or account takeover attempts is strongly recommended.