syncestrust[.]support

Analysis of the domain syncestrust.support confirms its classification as a fraudulent cryptocurrency scam targeting Coinbase users. The domain was registered on February 21, 2026, and resolves to the IP address 186.2.166.73, hosted on AS59692 (IQWeb FZ-LLC) in the United Arab Emirates. At the time of assessment, the site was offline, though prior activity is documented through multiple security indicators. The page title, 'Wallet Verification,' aligns with common phishing tactics used to deceive users into disclosing cryptocurrency wallet credentials. Security vendor detections provide concrete evidence of malicious intent: four of ninety-three engines on VirusTotal flagged the domain as harmful, while four independent blocklists have listed it.

Additional confirmation comes from PhishDestroy, Polkadot, Enkrypt, and Codeesura, all of which have implemented blocks. The domain's trust scores further reinforce its risk profile, with Gridinsoft assigning a score of 0/100 and Scamadviser rating it 35/100. The SSL certificate, issued under the R11 root, offers no additional trust signals, as such certificates are frequently used in low-reputation or short-lived phishing infrastructure. Infrastructure analysis reveals no legitimate association with Coinbase or its official services.

The domain's creation date, combined with its rapid detection by security vendors, suggests a campaign of limited duration designed to evade prolonged scrutiny. Defenders should treat syncestrust.support as a confirmed malicious asset and maintain blocks across web gateways, email filters, and endpoint protection systems. Given the domain's current offline status, further forensic analysis of its hosting environment may be constrained, though historical DNS and WHOIS records should be preserved for potential incident response needs.