coincheck69[.]org
“coincheck”
Résumé des preuves
Analysis of the domain coincheck69.org indicates it was actively impersonating the Coincheck cryptocurrency exchange platform, as evidenced by the page title 'coincheck' and the domain's naming convention. Registered on August 28, 2025, through Gname.com Pte. Ltd., the domain resolved to the IP address 182.16.54.146, hosted under AS45753 (Netsec Limited) in Hong Kong. The domain's nameservers, a2.share-dns.com and b2.share-dns.net, are consistent with infrastructure observed in other phishing campaigns, though no specific phishing kit or additional brand impersonation details are confirmed in the available data. The domain was flagged by 10 of 95 security vendors on VirusTotal, and it appears on at least one security blocklist, corroborating its classification as malicious.
Scamadviser assigned a trust score of 1 out of 100, further supporting the elevated risk assessment. The SSL certificate, issued to 'CoinCheck69 / coincheck69.org,' suggests an attempt to appear legitimate, though the certificate's details do not align with the official Coincheck exchange's infrastructure. As of the report date, the domain has been taken offline and is blocked by PhishDestroy, though defenders should remain vigilant for potential reemergence under similar naming schemes or infrastructure.
The exact content and functionality of the site remain unanalyzed, but the combination of domain registration details, hosting provider, SSL certificate, and detection by multiple security vendors strongly indicates a phishing operation targeting users of the Coincheck platform. Defenders are advised to monitor for related domains using variations of 'coincheck' or similar naming patterns, particularly those registered through the same registrar or resolving to the same IP range. Network-level blocking of the IP 182.16.54.146 and associated AS45753 infrastructure may mitigate residual risk from this campaign.
Data Coverage
Signaux de sécurité
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 13/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
État du domaine
Accessible → Inaccessible
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
-
État du domaine
Inaccessible → Accessible
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif