minersupport[.]cc

The domain minersupport.cc is identified as a brand impersonation threat specifically targeting Coinbase, a cryptocurrency exchange platform. Analysis confirms the domain is currently offline, but prior activity indicates malicious intent to deceive users by mimicking official Coinbase communication channels. The page title "About Coinbase" further supports the impersonation claim, as it aligns with legitimate branding elements used by the targeted organization.

Technical indicators reveal the domain was flagged by 17 of 95 security vendors on VirusTotal, indicating a moderate but notable detection rate. It resolves to the IP address 172.245.14.131, hosted on AS36352 (HostPapa) in the United States. The domain was registered on February 21, 2026, an unusually future date that may suggest suspicious registration practices or data manipulation. It appears on one security blocklist, and its SSL certificate is identified as R13. Infrastructure analysis reveals the domain was blocked by at least one security entity, reinforcing its classification as a threat.

Given the domain's current offline status, immediate risk to users is reduced. However, the technical indicators and historical activity warrant continued monitoring. Organizations and individuals are advised to block the domain at the network level, update endpoint protection rules to include the IP 172.245.14.131, and alert users to the impersonation tactics employed. Security teams should review logs for prior connections to this domain or IP and investigate any associated credential submissions or data exfiltration attempts. Proactive measures include monitoring for newly registered domains with similar naming patterns or Coinbase-related keywords.