Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is complaint@gname.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
coincheckusa[.]icu
“YAX Exchange: Bitcoin and Cryptocurrency Exchange | Cryptocurrency Trading | Buy Bitcoin - YAX”
coincheckusa.icu — Non verificato. Simulazione del marchio: Yahoo; Tipo di truffa: Generic Phishing. Riepilogo delle prove: VirusTotal 15/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. Registrar: Gname.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
coincheckusa.icu is a phishing domain actively targeting cryptocurrency users. It has been flagged by 5 out of 91 vendors on VirusTotal, indicating its malicious nature. The domain is registered with Gname.com Pte. Ltd. and hosted on an IP address managed by Cloudflare, Inc. in the United States. The SSL certificate is issued by Google Trust Services, which is often used to create a false sense of security among potential victims.
The domain first came to PhishDestroy's attention on June 18, 2026. It is included in public blocklists maintained by PhishDestroy, MetaMask, and SEAL, highlighting its recognition as a threat by multiple security entities. The platform risk score for coincheckusa.icu is 80 out of 100, underscoring the significant threat it poses to users who might engage with it.
Phishing domains like coincheckusa.icu often exploit the time gap between domain registration and the propagation of threat data across antivirus databases. This domain, created on September 27, 2025, exemplifies how attackers leverage this window to target unsuspecting users. The fact that it is already flagged by several vendors and blocklists indicates that it is a known threat, but its continued activity suggests it remains a danger to those not yet protected by these measures.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ZONA SHORTDOT · PROVE PUBBLICHE
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Dati e relazioni esterne
PD-20260618-B8FC6E Recipient: complaint@gname.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo