coinbase-secure[.]net

This domain is flagged as a crypto‑scam impersonating Coinbase. coinbase-secure.net was registered on 7 January 2026 through HOSTINGER operations, UAB and is hosted on an IP address (84.32.84.32) owned by AS47583 Hostinger International Limited, located in Lithuania. DNS resolution points to a parked page whose title reads “Parked Domain name on Hostinger DNS system”, indicating that the site is not serving a functional phishing login page at the time of observation. The SSL certificate presented is identified as “R13”, a certificate that does not correspond to a trusted authority and is typical of newly‑registered abuse infrastructure.

Gridinsoft assigns the domain a trust score of 0 / 100, reinforcing the malicious classification. The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy feed. AlienVault OTX lists the domain in a single pulse, providing additional corroboration from the threat‑intel community. VirusTotal analysis shows that 12 of 93 scanned security vendors flagged the domain, demonstrating a moderate level of detection across AV engines.

The overall risk rating is elevated, and the infrastructure is currently offline, suggesting that the operators have taken the site down, possibly after initial distribution of malicious links. Defenders should continue to block the IP address 84.32.84.32 and the domain coinbase‑secure.net at perimeter and DNS layers, monitor for any re‑registration or similar naming patterns targeting the Coinbase brand, and consider sharing the indicator with internal SOCs and threat‑sharing platforms. Ongoing vigilance is advised because the underlying hosting provider (Hostinger) is frequently abused for rapid deployment of impersonation sites, and the low trust score indicates a high likelihood of future campaigns using comparable infrastructure.