investigation-workspace[.]com
“Coinbase - Sign In”
investigation-workspace.com — असत्यापित. ब्रांड प्रतिरूपण: Coinbase; घोटाले का प्रकार: Credential Phishing. साक्ष्य सारांश: VirusTotal 22/91 (ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25); URLScan malicious verdict; Google Safe Browsing flagged; PhishStats feed match; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. रजिस्ट्रार: Hosting Concepts.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, investigation-workspace.com, is actively engaged in credential theft by impersonating Coinbase, a major cryptocurrency exchange platform. Visitors to this site are presented with a fraudulent login interface mimicking Coinbase's official sign-in page, designed to harvest user credentials. If entered, these credentials could be exploited to gain unauthorized access to victims' cryptocurrency wallets, leading to potential financial losses. The threat is classified as high-risk due to the direct targeting of sensitive financial information and the domain's active status. Analysis indicates that investigation-workspace.com was registered on March 24, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu. The domain resolves to the IP address 31.76.28.16 and currently holds a valid SSL certificate issued by Let's Encrypt, which may lend an appearance of legitimacy to unsuspecting users. As of the latest assessment, the domain has not been flagged by any of the 95 security vendors on VirusTotal, indicating it may still evade detection by some security tools. Google Safe Browsing has flagged the domain under the category SOCIAL_ENGINEERING, further confirming its deceptive nature. If you or someone you know has visited investigation-workspace.com and entered login credentials, immediate action is required to mitigate potential risks. First, cease all interaction with the domain and avoid clicking any links or downloading files from it. Next, change the passwords for any accounts that may have been exposed, starting with the Coinbase account and any other platforms where the same credentials were reused. Enable multi-factor authentication (MFA) on all critical accounts to add an additional layer of security. Monitor account activity closely for any unauthorized transactions or suspicious logins. If financial loss is suspected, report the incident to relevant financial institutions and consider filing a report with local cybercrime authorities to aid in tracking and mitigating the threat.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 7 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% विश्वासUbuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.
www.ubuntu.com 100% विश्वासReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100% विश्वासNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% विश्वासNext.js is a React framework for developing single page Javascript applications.
nextjs.org 100% विश्वासJSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 100% विश्वासवायरसटोटल विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।