www3-coinbase[.]com
Riepilogo delle prove
The domain www3-coinbase.com was registered on September 22, 2025 via the registrar 101domain.com and is currently taken offline. Infrastructure analysis shows the domain resolves to the IP address 13.65.229.69, which belongs to AS8075 Microsoft Corporation and is geographically located in the United States. The authoritative nameservers are lochlan.ns.cloudflare.com and rafe.ns.cloudflare.com, indicating the use of Cloudflare's DNS service. No SSL/TLS certificate is presented for the host, leaving the connection unencrypted and exposing any traffic to potential interception.
The site is classified as a crypto scam that impersonates the financial services brand Coinbase; the brand target is explicitly listed as Coinbase. Detection data from VirusTotal records that 15 of 95 security vendors have flagged the domain, providing a moderate level of corroboration across scanning engines. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service. Gridinsoft’s trust scoring system assigns the domain a score of 0 out of 100, reflecting a complete lack of trustworthiness.
While the offline status prevents real‑time interaction, the presence of a Microsoft‑hosted IP, Cloudflare DNS, and the absence of TLS suggest a deliberately low‑cost hosting setup typical of impersonation campaigns. Uncertainty remains regarding the specific payload or phishing kit employed, as no page title or content analysis is available. Defenders should add www3-coinbase.com to network and endpoint deny lists, enforce DNS sink‑holing for its IP range, and monitor for any re‑appearance on other blocklists. Continuous vigilance is advised, especially given the brand‑targeted crypto scam nature of the domain and its prior detection by multiple security vendors.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo