malasia[.]coinbaseudt[.]my

The domain malasia.coinbaseudt.my was registered on 21 February 2026 through Dynadot LLC and resolves to the IP address 154.209.5.13, which is hosted in Hong Kong under ASN 142403 (YISU CLOUD LTD). The site serves HTTPS using a Let’s Encrypt certificate (R13), indicating that a valid TLS layer is in place. The HTTP response returns the page title "Home - Signet Triangle", which does not explicitly reference the targeted brand, but the domain name itself contains the term "coinbase" and the intelligence record classifies the site as an impersonation of the Coinbase brand, falling under a crypto‑related scam category. VirusTotal scans have flagged the domain in 9 of 93 security engines, and the domain appears on one public security blocklist.

It was also actively blocked by the PhishDestroy service, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of malicious intent. The authoritative name servers are ns1.dyna-ns.net and ns2.dyna-ns.net, both commonly associated with dynamic DNS services that adversaries exploit for rapid infrastructure changes. Current observations indicate the site is offline, but the underlying infrastructure remains allocated and could be reactivated.

No public content snapshots are available, so the exact login or credential‑harvesting mechanisms have not been verified. Defenders should block the domain and its resolving IP at the DNS and network layers, incorporate the host into existing phishing and crypto‑scam blocklists, and monitor for new domains registered with the same registrar or name‑server pair. Ongoing re‑scanning with multi‑engine services is recommended to detect any future re‑hosting attempts.