Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
carlos-coinbase[.]com
“carlos-coinbase.com”
Ringkasan bukti
carlos-coinbase.com is an active domain created on 2026‑05‑02 and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The site resolves to 185.105.33.106, a host located in Great Britain and operated by Hosterion SRL; it presents a valid Let’s Encrypt certificate (E8) and returns HTTP 200 for the root URL. Infrastructure analysis shows the domain is served by the CloudNS nameservers ns71.cloudns.net and ns73.cloudns.net, carries a Gridinsoft trust score of 0 / 100, and is listed on three public blocklists. Threat intelligence flags the domain as a high‑risk brand‑impersonation campaign targeting Coinbase, with 17 of 91 VirusTotal scanners reporting malicious indicators. The domain is already blocked by several mitigation services, including PhishDestroy, MetaMask, and SEAL, but no public content has been disclosed, leaving the exact payload or credential‑harvesting mechanisms unconfirmed. Defenders should immediately block DNS resolution to 185.105.33.106, add carlos-coinbase.com to URL filtering and email security policies, and monitor for any outbound connections to the host. Continuous re‑analysis is recommended to detect potential changes in page content or additional infrastructure.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260502-043C7A- Judul halaman yang direkam
- carlos-coinbase.com
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: “Services may be used only for lawful purposes… fraud, abuse and illegal activity prohibited. Violations may result in immediate suspension.” + dedicated abuse handling and takedown
Applicable Laws: Crimes Ordinance Cap.200 (Fraud), Theft Ordinance Cap.210 §16A (fraud by deception), Personal Data (Privacy) Ordinance Cap.486
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | carlos-coinbase.com |
phishing | Phishing Block |
| Hagezi Threat Feed | carlos-coinbase.com |
malicious | Sinkholed |
| DNS4EU | carlos-coinbase.com |
malicious | Sinkholed |
| Quad9 DNS | carlos-coinbase.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
8 sumber eksternal dipantau Tidak cocok
Bukti hasil tersimpan
Hasil dan atribusi penonaktifan
- Hasil
live_content- Ketersediaan
content_live- Penyebab
content_served- Tingkat keyakinan
- 90%
- Pengamatan pertama
- Pengamatan terbaru
SHA-256 bukti 5aa1dfd79eaa
Linimasa deteksi
-
Ketersediaan
Nilai tersimpan pertama: Tidak diketahui
993d00c35140 -
Ketersediaan
Tidak diketahui → Konten aktif
3b38c028d520 -
Ketersediaan
Konten aktif → Tidak diketahui
6d360631fb87 -
Ketersediaan
Tidak diketahui → Konten aktif
69c4b9d6873e -
Ketersediaan
Konten aktif → Tidak diketahui
7cebcfd4071c -
Ketersediaan
Tidak diketahui → Konten aktif
fb39f967766d -
Ketersediaan
Konten aktif → Tidak diketahui
ca255b61650a -
Ketersediaan
Tidak diketahui → Konten aktif
fb966eda50f2 -
Ketersediaan
Konten aktif → Tidak diketahui
d8f7d37d7f95 -
Ketersediaan
Tidak diketahui → Konten aktif
aeb765f039b8
Tampilkan semua (4)
-
Ketersediaan
Konten aktif → Tidak diketahui
afa49a2b04dd -
Ketersediaan
Tidak diketahui → Konten aktif
893c26153836 -
Ketersediaan
Konten aktif → Tidak diketahui
e70d6b0bd31a -
Ketersediaan
Tidak diketahui → Konten aktif
5aa1dfd79eaa
Laporan komunitas
Dilaporkan oleh 1 anggota komunitas; pertama terlihat 02/05/2026
- Laporan tersimpan
- 1
- URL unik yang dilaporkan
- 1
Intelijen komunitas
1 laporan komunitas
KategoriPHISHING
Phishing scam impersonating Coinbase support. Victim tricked into entering Ledger recovery phrase. Funds stolen and routed through this wallet.
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Domain serupa
255 domain serupa tersimpan
Tampilkan semua (88)
Menampilkan 100 dari 255
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive