coin-strike-hu.online
“Google Play”
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@godaddy.com.
The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Evidence Summary
This domain, coin-strike-hu.online, is flagged for brand impersonation targeting Google, specifically mimicking the Google Play platform. Analysis indicates the page title explicitly displays 'Google Play,' suggesting an intent to deceive users into submitting login credentials or financial information under false pretenses. No direct association with known drainer kits has been confirmed, though the use of tracking technologies such as Facebook Pixel may indicate broader malicious intent beyond credential theft. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Go Daddy, LLC, and currently resolves to the IP address 188.114.97.3. Detection metrics show 0 out of 95 engines on VirusTotal flagging the domain as malicious, though it appears on one security blocklist. The domain employs Cloudflare services, including HTTP/3 and Browser Insights, which may obscure further analysis. The SSL certificate is issued by Google Trust Services, a legitimate provider, which could lend an appearance of authenticity to unsuspecting users. At present, coin-strike-hu.online has been taken offline, likely in response to security alerts. However, the domain remains registered, and the infrastructure could be reactivated or repurposed for similar campaigns. The low detection rate on VirusTotal (0/95) and limited blocklist presence (1/1) underscore the need for continued monitoring. Users and organizations are advised to treat any future activity from this domain or associated IPs with heightened suspicion, particularly if it resurfaces under similar branding or infrastructure patterns.
Security Signals
Forensic History & Detection Timeline
-
VirusTotal Detections Update Jun 27, 2026 · 01:26 UTCVirusTotal scanner detections updated from 2 to 0. Resolved alerts: Gridinsoft, SOCRadar.
-
VirusTotal Detections Update Mar 11, 2026 · 03:00 UTCVirusTotal scanner detections updated from 3 to 4. Added scanner alerts: alphaMountain.ai.
-
VirusTotal Detections Update Mar 6, 2026 · 05:10 UTCVirusTotal scanner detections updated from 2 to 3. Added scanner alerts: Bfore.Ai PreCrime.
Threat Response Pipeline
Public Blocklist Status
Detection-evasion evidence
Cloaking confirmed: scanners and visitors see different content
Observed
Different content was served to scanners and to visitors
The page served one response to a browser-like visitor and another to a crawler or security scanner. Cloaking exists only to keep reviewers away from the real landing page.
- Stored cloaking flag
- Observed
- Cloaking type
content_divergence- Cloaking score
- 1/6
- Last cloaking scan
- Server header seen by scanner
cloudflare
Scanner note: alive_content: raw=ok; http=200; via=https_proxy; server=cloudflare
Stored Capture · 2 sources
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 4 identified
VirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of coin-strike-hu.online · checked Jun 27, 2026
Community reports
Reported by 1 community member, first seen Feb 5, 2026
- Stored reports
- 1
- Unique reported URLs
- 1
Evidence & External Reports
PD-20260205-A32CED Recipient: abuse@godaddy.com Abuse notice text as sent to the provider
Policy Violations: Acceptable Use Policy (AUP): The domain coin-strike-hu.online is engaged in phishing activities, which directly contravenes the AUP by facilitating fraud and deception. Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations, and the ongoing use of this domain for illegal activities constitutes a clear breach of these terms. Applicable Laws (Unknown): Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and the use of fraudulent schemes to obtain information, which applies to phishing activities. Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, which is relevant to the operations of coin-strike-hu.online. Anti-Phishing Consumer Protection Act: This legislation aims to combat phishing by imposing penalties on those who engage in deceptive practices online. Regulatory Note: Failure to take immediate action against this domain may result in liability for facilitating illegal activities and could expose your organization to regulatory scrutiny and potential penalties.
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive