hpoticoinbase-fraud[.]starbuckslocation[.]com

The domain hpoticoinbase-fraud.starbuckslocation.com is currently active and returns HTTP 200 without an SSL certificate. Infrastructure analysis shows the name resolves to IP 185.53.177.54, which is allocated to AS61969 (Team Internet AG) in Germany. The domain was registered on June 5 2014 through Epik LLC and uses the parkingcrew.net name servers (ns1.parkingcrew.net, ns2.parkingcrew.net). Threat intelligence indicates the site appears on two security blocklists, specifically PhishDestroy and BLP‑Malware, and 14 of 95 VirusTotal scanners flag it as malicious. The Gridinsoft trust score is 0 / 100, reinforcing a high‑risk classification. The page title matches the domain name, and the listed brand target is Coinbase with a cryptocurrency scam type. No additional content has been publicly disclosed, so the exact malicious payload or social engineering tactics remain unverified. Defenders should treat the domain as hostile: block network connections to the resolved IP, add the domain to URL filtering and DNS sinkhole lists, and monitor for any related C2 activity. Continuous re‑scanning is advised to capture any future changes in payload or hosting infrastructure.