lineahub[.]space

lineahub.space is a confirmed phishing domain that engaged in brand impersonation of Coinbase, presenting itself as a cryptocurrency airdrop checker under the title 'Airdrop Checker – Linea' to deceive users into connecting their wallets. The site posed a specific threat of credential harvesting or wallet-draining, though no drainer kit was identified. The domain is currently taken offline, but it remains a risk for users who may have interacted with it.

Technical indicators for lineahub.space include detection by 2 of 95 VirusTotal vendors, specifically Gridinsoft and Seclookup, with Gridinsoft assigning a trust score of 0/100. The domain was registered through NameCheap, Inc. on August 29, 2025, and resolves to IP address 172.67.220.176, hosted in the US on AS13335 Cloudflare, Inc. It appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. Google Safe Browsing did not flag the domain. The SSL certificate was issued by WE1.

Users who may have visited lineahub.space should take immediate safety steps: if any wallet was connected, revoke all token approvals using a blockchain explorer or a token approval checker, and transfer any cryptocurrency to a new, uncompromised wallet. Change passwords for any accounts that may have been entered on the site, enable two-factor authentication, and monitor financial accounts for unauthorized activity. Report the domain to phishing reporting services such as the Anti-Phishing Working Group or the hosting provider Cloudflare.