coincheck69[.]org
“coincheck”
coincheck69.org — Não verificado. Tipo de golpe: Fake Exchange. Resumo das evidências: VirusTotal 10/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); PhishDestroy score 88/100. Registrador: Gname.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of the domain coincheck69.org indicates it was actively impersonating the Coincheck cryptocurrency exchange platform, as evidenced by the page title 'coincheck' and the domain's naming convention. Registered on August 28, 2025, through Gname.com Pte. Ltd., the domain resolved to the IP address 182.16.54.146, hosted under AS45753 (Netsec Limited) in Hong Kong. The domain's nameservers, a2.share-dns.com and b2.share-dns.net, are consistent with infrastructure observed in other phishing campaigns, though no specific phishing kit or additional brand impersonation details are confirmed in the available data. The domain was flagged by 10 of 95 security vendors on VirusTotal, and it appears on at least one security blocklist, corroborating its classification as malicious.
Scamadviser assigned a trust score of 1 out of 100, further supporting the elevated risk assessment. The SSL certificate, issued to 'CoinCheck69 / coincheck69.org,' suggests an attempt to appear legitimate, though the certificate's details do not align with the official Coincheck exchange's infrastructure. As of the report date, the domain has been taken offline and is blocked by PhishDestroy, though defenders should remain vigilant for potential reemergence under similar naming schemes or infrastructure.
The exact content and functionality of the site remain unanalyzed, but the combination of domain registration details, hosting provider, SSL certificate, and detection by multiple security vendors strongly indicates a phishing operation targeting users of the Coincheck platform. Defenders are advised to monitor for related domains using variations of 'coincheck' or similar naming patterns, particularly those registered through the same registrar or resolving to the same IP range. Network-level blocking of the IP 182.16.54.146 and associated AS45753 infrastructure may mitigate residual risk from this campaign.
Sinais de segurança
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Evidências arquivadas
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo