69985-coinbase[.]com
Résumé des preuves
This site, identified by the title "Just a moment...", is a cryptocurrency scam designed to impersonate the Coinbase brand. The threat it poses is social engineering, as confirmed by Google Safe Browsing, which flagged the site for "SOCIAL_ENGINEERING." The site likely attempts to trick users into providing login credentials or other sensitive information under the guise of a legitimate Coinbase platform.
Technical evidence shows the domain was flagged by 16 out of 95 VirusTotal vendors. It was created on 2026-01-31 and registered through CNOBIN INFORMATION TECHNOLOGY LIMITED. The IP address 104.21.91.91 is hosted in the US by Cloudflare, Inc. (AS13335). The site has no SSL certificate and is currently offline, with nameservers sharon.ns.cloudflare.com and stan.ns.cloudflare.com. Three blocklists have flagged this domain.
The current status of the site is DOWN/OFFLINE, with a GridinSoft trust score of 0 out of 100. The risk level is high due to the confirmed social engineering threat and multiple security vendor detections, though the offline status mitigates immediate risk.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260131-56DCB7- Artefact PDF
- Preuve PDF
Fondement juridique
Texte intégral des preuves
Acceptable Use Policy (AUP): The domain 69985-coinbase.com is actively engaged in phishing activities, which is a direct violation of your AUP that prohibits illegal activities, fraud, and deception.
Terms of Service (TOS): The continued operation of this domain constitutes a breach of your TOS, which reserves the right to suspend or terminate services for violations related to fraudulent activities.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and the use of fraudulent schemes, which applies to phishing activities.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, including phishing.
Anti-Phishing Act of 2004: This law specifically addresses phishing and imposes penalties for those who engage in deceptive practices to obtain sensitive information.
Regulatory Note: Failure to take immediate action against this phishing domain may result in liability for facilitating illegal activities and could lead to regulatory scrutiny. It is imperative to comply with your AUP and TOS to avoid potential legal repercussions.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse forensique
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif