# h5.cf-coin.com — SUSPICIOUS

> h5.cf-coin.com shows signs of potential phishing activity. Stay cautious and avoid sharing sensitive data. Learn more about this domain's safety status.

## Summary
PhishDestroy identifies h5.cf-coin.com as a domain under active investigation for potential generic phishing threats. While its exact risk level is currently labeled as "under investigation," the domain's recent creation and suspicious context warrant caution for users encountering it.

The domain h5.cf-coin.com was registered on January 8, 2026, through Gname.com Pte. Ltd., which is often used by various domain registrants. It resolves to the IP address 154.213.191.156. Despite a thorough VirusTotal scan revealing zero detections from 95 security vendors, the domain's newness combined with its structure and naming pattern raises suspicion. No current blocklist or threat intelligence pulses definitively flag this domain, but its status remains under review by PhishDestroy's monitoring systems.

Users are advised to exercise vigilance when interacting with h5.cf-coin.com, especially avoiding input of personal or financial information until further verification is completed. PhishDestroy continues to track this domain’s activity and will update its risk assessment accordingly. Employing standard security measures such as using updated antivirus software and enabling browser anti-phishing features can help mitigate potential exposure to threats associated with this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: CF

## Domain Intelligence
- Registered: 2026-01-08 07:41:58
- Registrar: Gname.com Pte. Ltd.
- IP: 154.213.191.156
- Nameservers: a8.share-dns.com b8.share-dns.net

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["ADMINUSLabs", "Kaspersky", "SOCRadar", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content

### Page Text
403 Forbidden 403 Forbidden nginx

## Evidence
- Screenshot: https://i.ibb.co/9mkrRzRz/ccb36bab49b2.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/d8d98897-6220-4482-ae85-005889a2a3fd
- PhishDestroy: https://phishdestroy.io/domain/h5.cf-coin.com/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/h5.cf-coin.com/
Last updated: 2026-03-14