fec4yd[.]miningyb[.]vip
“Coinbase Defi”
This technical threat report details the domain fec4yd.miningyb.vip, which was observed impersonating the Coinbase brand under the page title "Coinbase Defi." This site constitutes a cryptocurrency scam, posing a threat by attempting to deceive users into believing they are interacting with a legitimate Coinbase DeFi platform, likely to steal credentials or funds.
Technical evidence from the provided data shows the domain was flagged by 21 out of 95 VirusTotal vendors. Google Safe Browsing flagged the site for SOCIAL_ENGINEERING. The domain is registered with Gname.com Pte. Ltd., created on 2024-12-04, and hosted on IP address 95.40.26.41 in Hong Kong, under AS16509 Amazon.com, Inc. The site has no SSL certificate and uses nameservers a.share-dns.com and b.share-dns.net. It is listed on 3 blocklists and flagged by ADMINUSLabs, ChainPatrol, Criminal IP, BitDefender, and CRDF.
The current status of fec4yd.miningyb.vip is down or offline. Based on the high detection rate, active blocklisting, and impersonation of a well-known brand, the risk level is assessed as high. The domain poses a significant threat to users, particularly those seeking cryptocurrency services, due to its fraudulent nature and social engineering component.
Network Security Intelligence
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Registration: miningyb.vip
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For the registrable domain miningyb.vip behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Archived Evidence
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive