MALICIOUS — CRITICAL
فحص التصيد والأمان للنطاق coinhakox.org
coinhakox[.]
This domain, coinhakox.org, is actively flagged as high-risk phishing infrastructure targeting cryptocurrency users.
- VirusTotal
- 17/91
- Blocklists
- 2 · MetaMask, SEAL
- التوفر
- مغطى بعباءة · يمكن الوصول إليه · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@dynadot.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
coinhakox.org — مغطى بعباءة · يمكن الوصول إليه (HTTP 403). ملخص الأدلة: VirusTotal 17/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao); URLQuery 1 det.; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 100/100. مسجّل النطاق: Dynadot.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
This domain, coinhakox.org, is actively flagged as high-risk phishing infrastructure targeting cryptocurrency users. Registered on March 4, 2026, through Dynadot LLC, it resolves to IP address 188.114.97.3 and is currently operational. Analysis indicates the site presents itself under the page title 'Portfolio | Web Developer,' though the exact nature of the phishing content remains unconfirmed due to lack of direct inspection. The domain is detected by 17 of 95 security vendors and appears in 24 threat intelligence pulses, suggesting widespread recognition as malicious. It is blocked by five security blocklists, including SEAL, MetaMask, and PhishDestroy, and is explicitly flagged for social engineering by Google Safe Browsing. Infrastructure analysis reveals the use of Cloudflare for hosting and protection, alongside technologies such as Vue.js, HSTS, and HTTP/3, which may be leveraged to enhance credibility or evade detection. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites. Defenders should treat this domain as active phishing infrastructure, particularly in environments where cryptocurrency-related activity is present. Blocking at the DNS or network level is recommended, and any associated credentials or wallet interactions should be considered compromised. Further investigation into the hosting provider and certificate transparency logs may yield additional indicators of compromise.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
نطاق تغطية البيانات12 recorded checks
استخبارات أمن الشبكات
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
التقنيات · 5 identified
Progressive JavaScript framework for building user interfaces.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
تحليل VirusTotal
الأدلة المؤرشفة
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of coinhakox.org · checked Jul 13, 2026
الأدلة والتقارير الخارجيةIndependent lookups and source reports
PD-20260304-EDB2EA Recipient: abuse@dynadot.com Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.