VirusTotal
1 / 89 engine detections
Apri il rapporto“Coinshift”
Phishing WalletConnect: coinshift.global — Ultimo attivo conosciuto (HTTP 301). Riepilogo delle prove: VirusTotal 1/89 (Gridinsoft); PhishDestroy score…
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
1 / 89 engine detections
Apri il rapporto23 community references
Apri il rapportoprovider verdict: clean
Apri il rapporto14 verificato — nessun blocco
66/100
Apri il rapportoNo threat flag
Apri il rapportoNo malicious flag
Apri il rapportoResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
coinshift.global functions as a crypto drainer phishing domain that impersonates across using the Wallet Connect Abuse kit to target cryptocurrency wallets through deceptive connection prompts. This scam has been taken offline. Individuals asking if coinshift.global is safe or a scam should recognize the high risk posed by such wallet connect phishing activity that can lead to asset drainage.
Technical indicators for coinshift.global include 0 of 95 VirusTotal vendors, registration through GoDaddy.com, LLC, resolution to IP address 13.33.187.50, appearance on 1 security blocklist, and an SSL certificate issued by Amazon / Amazon RSA 2048 M04. The domain also shows a Gridinsoft trust score of 0/100, IP location in DE under AS16509 Amazon.com, Inc., technologies from Amazon Web Services, Amazon S3, Amazon CloudFront and AWS Certificate Manager, page title Coinshift, nameservers jake.ns.cloudflare.com and serena.ns.cloudflare.com, and blocking by PhishDestroy.
Affected users facing this crypto drainer should revoke token approvals granted during any interaction and transfer remaining funds to a new wallet. Reporting the phishing incident to the registrar GoDaddy.com, LLC and blocklist providers supports broader removal efforts.
Full extracted values, their blockchain and collection source. An address found in page content does not establish who controls it.
0xbEeFc011e94f43b8B7b455eBaB290C7Ab4E216f1Format validated · Domain analysisIoC extraction recorded 2026-07-29 02:45:16 UTC
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
La reputazione Edge-IP non è attribuita a questo dominio.
jake.ns.cloudflare.comserena.ns.cloudflare.comLocation describes the IP network.
c775fe9cc205fdd88c42abee8d0aa25d5b23dfe3e293afdeec2cb4354ab32603Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of coinshift.global · checked Mar 2, 2026
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
redirect: raw=redirect_301; http=301; via=https_proxy; location=https://app.coinshift.xyz/; server=cloudflare
coinshift.global
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
Sconosciuto→redirected
http_redirect
0→Observation retained
No threat flag
View source23 community references
View source1/89 engine detections
View sourcePage captured
View sourcecoinshift.global
View sourceSegnalato da 1 membro della comunità; prima osservazione il 05/09/2025
Listed domains receive at least one abuse report; this entry has no retained notification history.
Se hai interagito con questo dominio, hai inserito informazioni personali o hai collegato un portafoglio di criptovaluta, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Si stima che $51 billion sono confluiti in portafogli di criptovalute illegali nel 2024 (source). Se hai interagito con coinshift.global — agisci subito.
Wallet-specific steps below apply if you connected a wallet, signed a transaction, or exposed a wallet secret.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Secondo il FBI, i dettagli più importanti sono i dati relativi alle transazioni:
0x5856...35985)coinshift.global)Anche se non conosci tutti i dettagli — sporgere comunque denuncia. Anche le informazioni parziali sono comunque utili alle indagini.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaSegnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraControlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.