# coin-wave.biz — MALICIOUS

> coin-wave.biz is flagged for phishing and social engineering risks. Avoid sharing personal info and stay cautious of suspicious crypto exchanges.

## Summary
PhishDestroy identifies coin-wave.biz as a generic phishing threat, targeting users under the guise of a cryptocurrency exchange. The domain’s page title promises Bitcoin and Ethereum transactions but is designed to deceive.

Technically, the domain resolves to IP 104.21.15.31 and was registered through NiceNIC International Group Co., Limited. It is newly created and flagged by Google Safe Browsing for social engineering, appearing on one security blocklist. VirusTotal detected suspicious activity from multiple vendors.

Currently, coin-wave.biz is offline, reflecting a response to its high-risk status. Users are advised to avoid interaction with this domain and report any suspicious activity related to it.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Exchange

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.15.31
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["opal.ns.cloudflare.com", "bjorn.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bc0ed-f0a4-741b-9407-d7bd12c34cfa.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e6a57c83-c140-468a-82aa-1fd2d745be88
- PhishDestroy: https://phishdestroy.io/domain/coin-wave.biz/
- LLM endpoint: https://phishdestroy.io/domain/coin-wave.biz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coin-wave.biz/
Last updated: 2026-03-19