# PhishDestroy domain threat record: duplicate-disabled-46620.invalid

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/duplicate-disabled-46620.invalid/
Machine-readable companion: https://phishdestroy.io/domain/duplicate-disabled-46620.invalid/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: not observed active
- First observed by PhishDestroy: 2026-01-05 06:00:03 UTC
- Last availability or vendor check: 2026-10-21 01:13:49 UTC
- Stored record updated: 2026-10-22 14:22:01 UTC
- VirusTotal detections in the stored snapshot: 14/91
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: argent

## Stored infrastructure

- Observed IP address: 45.10.243.7
- Registrar in stored WHOIS data: Ddos-guard

## Evidence links

- URLScan report: https://urlscan.io/result/019b8cf4-3f05-778c-88db-a4f903e16c78/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/duplicate-disabled-46620.invalid
- Certificate Transparency search: https://crt.sh/?q=%25.duplicate-disabled-46620.invalid
- Web Archive lookup: https://web.archive.org/web/*/https://duplicate-disabled-46620.invalid/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

PhishDestroy has identified www.deepcoin-user.at as a brand impersonation domain specifically targeting users of the Argent platform. This domain, now taken offline, was designed to harvest login credentials through a fraudulent Deepcoin login page titled "Deepcoin ログイン | Deepcoin サインイン | Secure Crypto Exchange Login." The threat type is a crypto drainer, as the fake login page likely aimed to steal wallet credentials and drain digital assets. The domain was registered through Ddos-guard, a hosting provider known for lax abuse policies, and used a Let's Encrypt SSL certificate to appear legitimate.

Technical analysis reveals that www.deepcoin-user.at was flagged by 2 out of 95 VirusTotal security vendors, indicating a moderate detection rate among security tools. The domain resolved to IP address 45.10.243.7 and appeared on one security blocklist. Its registration via Ddos-guard and use of a free SSL certificate are common indicators of phishing operations. The domain was impersonating Argent, a popular crypto wallet and exchange platform, making it a high-risk threat for users who may have been tricked into entering sensitive information.

As the domain is currently offline, the immediate threat of credential theft is mitigated. However, users who may have interacted with this site should take immediate action: change passwords on any accounts potentially compromised, enable two-factor authentication, and monitor wallets for unauthorized transactions. PhishDestroy recommends always verifying the legitimacy of login URLs before entering credentials, especially for crypto platforms. If you encounter similar suspicious domains, report them to PhishDestroy to help protect the community. Stay vigilant against brand impersonation attacks, as they remain a prevalent vector for crypto asset theft.
Analysis generated: 2026-06-18 16:38:37 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019b8cf4-3f05-778c-88db-a4f903e16c78.png
  Captured: 2026-02-23 07:38:11 UTC
- URLScan capture: https://screenshots.phishdestroy.io/019b8cf4-3f05-778c-88db-a4f903e16c78.png
  Captured: 2026-02-23 07:38:11 UTC
  Source report: https://urlscan.io/result/019b8cf4-3f05-778c-88db-a4f903e16c78/