Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@beget.ru.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
coinbaseru[.]ru
“Биржа Coinbase — Вход на официальный сайт”
coinbaseru.ru — Não verificado. Representação da marca: Coinbase; Tipo de golpe: Brand Impersonation. Resumo das evidências: VirusTotal 19/91 (ADMINUSLabs, ChainPatrol, Criminal IP, alphaMountain.ai, BitDefender); URLQuery 5 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. Registrador: BEGET-RU.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain coinbaseru.ru is currently active and has been identified as a brand impersonation threat targeting Coinbase. This domain poses a high risk level due to its deceptive nature, which can lead to financial and personal data theft.
Analysis indicates that coinbaseru.ru has been flagged by 17 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among the security community. The domain was created on June 08, 2026, and is registered through BEGET-RU. It resolves to the IP address 87.236.16.13 and uses an SSL certificate issued by Let's Encrypt. The domain appears on 4 security blocklists, including PhishDestroy, MetaMask, SEAL, and PhishingDB, further corroborating its malicious intent. The page title, 'Биржа Coinbase — Вход на официальный сайт,' translates to 'Coinbase Exchange — Login to the Official Site,' which is a clear attempt to deceive users into believing they are accessing the legitimate Coinbase platform.
Given the current active status of coinbaseru.ru, users are strongly advised to avoid interacting with this domain. Security professionals should block this domain at the network level and educate users about the risks of brand impersonation attacks. Additionally, monitoring for any related subdomains or similar deceptive URLs is recommended to prevent further fraudulent activities.
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | coinbaseru.ru |
malicious | Sinkholed |
| OpenDNS | coinbaseru.ru |
phishing | Phishing Block |
| DigiCert UltraDNS | coinbaseru.ru |
malicious | Sinkholed |
| Quad9 DNS | coinbaseru.ru |
malicious | Sinkholed |
| DNS4EU | coinbaseru.ru |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Análise do VirusTotal
Evidências e relatórios externos
PD-20260608-E40538 Recipient: abuse@beget.ru Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo