MALICIOUS — HIGH
coinholmes[.]com
2 of 91 security engines flagged the domain; the latest stored check returned HTTP 200.
- VirusTotal
- 2/91
- Blocklists
- No stored match
- उपलब्धता
- अंतिम ज्ञात सक्रिय · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
coinholmes.com — अंतिम ज्ञात सक्रिय (HTTP 200). घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 2/91 (CRDF, Gridinsoft); PhishDestroy score 66/100. रजिस्ट्रार: Cloudflare.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Evidence Analysis
Analysis of coinholmes.com, created on February 21, 2026, shows a domain that is actively serving content (HTTP 200) and is hosted behind Cloudflare’s network (AS13335, United States). The domain resolves to IP address 188.114.96.3 and uses Cloudflare‑provided authoritative nameservers gabriel.ns.cloudflare.com and heidi.ns.cloudflare.com. The site presents the page title “AML Solution for Digital Assets|CoinHolmes,” suggesting a focus on anti‑money‑laundering services for digital assets, yet the intelligence classifies the operation as a crypto‑related phishing campaign. The domain appears on three public security blocklists and is specifically blocked by PhishDestroy, MetaMask, and SEAL, indicating that industry‑focused anti‑phishing tools have identified it as a threat.
VirusTotal analysis shows a single detection out of 93 scanning engines, reinforcing the presence of malicious indicators. The SSL certificate is issued by Google Trust Services under the “WE1” intermediate, confirming a valid TLS handshake but offering no protection against the underlying fraudulent activity. Additional infrastructure observations include the use of Google Analytics and HTTP/3, both typical of legitimate sites and therefore not useful discriminators. A Gridinsoft trust score of 0 / 100 further underscores the low credibility of the domain.
While the page title and technology stack suggest a veneer of legitimacy, the convergence of blocklist listings, the single VirusTotal detection, and the classification as a crypto scam point to a high‑risk phishing operation targeting cryptocurrency users. Uncertainty remains regarding the exact phishing vector (e.g., credential harvesting, malicious wallet redirects) because the page content has not been examined. Defenders should block the domain at network perimeter, monitor DNS queries for the associated Cloudflare nameservers, and add the IP address 188.114.96.3 to threat‑intel feeds.
डेटा कवरेज13 recorded checks
सुरक्षा संकेत
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 3 identified
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of coinholmes.com · checked Mar 7, 2026
साक्ष्य और बाहरी रिपोर्टेंIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।