MALICIOUS — HIGH
coinscrapp[.]com
3 of 91 security engines flagged the domain; the latest stored check returned HTTP 521.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- Ketersediaan
- Kesalahan server · HTTP 521
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
coinscrapp.com — Kesalahan server (HTTP 521). Peniruan identitas merek: Ethereum; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 69/100. Registrar: Gransy, s.r.o.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Digest
coinscrapp.com is classified high with an evidence score of 69/100. 3 of 91 security engines flagged the domain. Registered 13 Oct 2025 via Gransy, s.r.o., hosted on 172.67.219.36 (CLOUDFLARENET, US, US). The latest stored check on 9 Aug 2026 returned HTTP 521 and includes a capture.
Stored generated summary (templated)cerebras · 24/07/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
coinscrapp.com is identified as an active brand‑impersonation site targeting Ethereum users. The domain was registered on 13 October 2025 through the registrar Gransy, s.r.o. and is hosted behind Cloudflare’s network (AS13335). DNS resolution points to 172.67.219.36, a Cloudflare edge address located in the United States. The site presents the page title “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | CoinScrapp”, which explicitly references both Bitcoin and Ethereum, confirming the intent to lure cryptocurrency traders.
Infrastructure analysis shows the use of Cloudflare’s HTTP/3 protocol and a TLS certificate issued by Google Trust Services under the WE1 designation, indicating a valid HTTPS configuration despite the malicious purpose. Security assessments are uniformly negative: Scamadviser assigns a trust score of 1 / 100, Gridinsoft also rates it 1 / 100, and the domain appears on the PhishDestroy blocklist, with a total of one security blocklist listing. VirusTotal scans report that two of ninety‑five vendor engines flag the domain, reinforcing the suspicion. An HTTP 521 response from Cloudflare suggests that the origin server is unavailable, a pattern often observed in phishing‑as‑a‑service deployments that rely on temporary landing pages. Defenders should treat coinscrapp.com as high‑risk.
The primary indicators of compromise include the brand‑impersonation page title, the low trust scores, the presence on a dedicated phishing blocklist, and the dual vendor flags on VirusTotal. Network sensors should block outbound connections to the IP 172.67.219.36 and any subdomains resolved from the same Cloudflare nameservers (demi.ns.cloudflare.com, zeus.ns.cloudflare.com). Endpoint protection should flag any URLs containing the “CoinScrapp” keyword or referencing Ethereum transactions.
Cakupan data14 recorded checks
Sinyal Keamanan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan EksternalIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.