h5[.]coinbase666[.]com
“h5.coinbase666.com”
Osservazione memorizzata
Contrasto dei titoli osservato
Analysis indicates that h5.coinbase666.com was registered on May 06 2026 via Gname.com Pte. Ltd. The domain resolves to 104.21.55.141, a Cloudflare edge node located in Canada. The authoritative nameservers are collins.ns.cloudflare.com and javon.ns.cloudflare.com, confirming Cloudflare hosting. The site presents a page title identical to the domain and is classified as a brand impersonation targeting Coinbase. The SSL certificate is issued by Google Trust Services under the WE1 root, indicating a valid TLS certificate despite malicious intent. Cloudflare services including HTTP/3 are detected, and the HTTP response code is 521, consistent with Cloudflare's error for no origin server response. Reputation scoring from Gridinsoft is 0/100, and 16 of 91 VirusTotal scanners have flagged the domain. It appears on one public blocklist and has been added to the PhishDestroy blocklist. The infrastructure suggests a typical phishing deployment that leverages reputable CDN services to obscure the true hosting location. Uncertainties remain regarding the content served at the URL, as the HTTP 521 status prevents retrieval of the page body, and no detailed analysis of payload or credential capture mechanisms is available. The presence of a valid TLS certificate and Cloudflare's CDN does not mitigate the threat but rather aids evasion. Defenders should immediately block DNS resolution for h5.coinbase666.com, add the IP address 104.21.55.141 to network deny lists, and monitor for any outbound connections to this address. Continuous scanning of the domain with updated threat‑intelligence feeds is advised, as the infrastructure may shift to new IPs or sub‑domains. Alerting users about potential Coinbase impersonation attempts and encouraging verification of URLs can reduce successful exploitation.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti · sincronizzato il 10/08/2026
Cronologia del rilevamento
Osservazioni memorizzate in ordine cronologico.
-
VirusTotal
VirusTotal: 13 → 16
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Registration: coinbase666.com
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain coinbase666.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie
2 tecnologie identificate con alta affidabilità
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of h5.coinbase666.com · checked Jun 26, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo