htmkfhjfhfhfjjf[.]today

This domain htmkfhjfhfhfjjf.today is flagged as a high-risk brand impersonation targeting Coinbase. Registered on March 20, 2026 through Name.com, Inc., the domain resolves to IP 34.111.179.208, hosted on Google Cloud infrastructure with HSTS, Google Cloud Trace, Google Cloud CDN, and HTTP/3 support. The page title is 'Coinbase Support', indicating an attempt to impersonate Coinbase customer service or support portals. Google Safe Browsing flags the domain for SOCIAL_ENGINEERING. The domain appears on 5 security blocklists and is blocked by SEAL, MetaMask, PhishDestroy, InversionDNS, and BLP-Malware. AlienVault OTX shows the domain in 23 threat intelligence pulses, and VirusTotal reports 15 of 95 security vendors flagging it as malicious. The Gridinsoft trust score is 0 out of 100. As of July 12, 2026, the domain remains active. Defenders should block this domain at the network and email gateway levels, and monitor for any associated subdomains or IP changes. Users receiving unsolicited communications referencing 'Coinbase Support' from this domain should be warned not to interact with it. The exact content of the page has not been visually analysed, but the combination of brand impersonation, social engineering flags, and multiple blocklist appearances confirms malicious intent.