coinbase-india[.]com
“Coinbase India”
Сводка доказательств
The domain coinbase-india.com is a confirmed phishing site engaged in brand impersonation, specifically targeting users of the cryptocurrency platform Coinbase. This site was designed to deceive victims into believing it was an official Coinbase India portal, posing an elevated risk as a cryptocurrency scam. No drainer kit was identified, but the domain was actively used for credential harvesting and fraudulent transactions. As of the latest verification, coinbase-india.com has been taken offline.
Technical analysis reveals that coinbase-india.com was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and SOCRadar. The domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolved to the IP address 76.223.105.230, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. It appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. No SSL certificate was present, and the observed page title was 'Coinbase India'. Nameservers were ns19.domaincontrol.com and ns20.domaincontrol.com, with a Gridinsoft trust score of 0/100.
Users who interacted with coinbase-india.com should immediately change any passwords entered on the site and enable two-factor authentication on their Coinbase accounts. Monitor account activity for unauthorized transactions and report any fraud to Coinbase support. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. Victims should also consider filing a complaint with local cybercrime authorities or the FBI’s Internet Crime Complaint Center if financial loss occurred.
Снимок отправленных доказательств
- Отправлено
- Записи журнала
- 1
- ID дела
PD-20260211-4EA068- Заголовок сохранённой страницы
- Coinbase India
- PDF-файл
- PDF с доказательствами
Правовое основание
Полный текст доказательств
Acceptable Use Policy (AUP): The domain coinbase-india.com is actively engaged in phishing activities, which constitutes a clear violation of your AUP prohibiting illegal activities and deception.
Terms of Service (TOS): The fraudulent nature of this domain warrants immediate action under your TOS, which reserves the right to suspend or terminate services for violations related to fraud and deception.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which is applicable as phishing schemes often involve unauthorized access to sensitive information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, which is directly relevant to the activities associated with this domain.
Anti-Phishing Consumer Protection Act: This legislation aims to combat phishing by imposing penalties on those who engage in deceptive practices to obtain personal information.
Regulatory Note: Failure to take prompt action against this domain may expose your organization to legal liability and regulatory scrutiny. Immediate compliance with your AUP and TOS is essential to mitigate these risks.
Data Coverage
Процесс реагирования на угрозы
Проверка по блок-листам
10 внешних источников под наблюдением · снимок от 11.08.2026
8 внешних источников под наблюдением Совпадений нет
Хронология обнаружения
-
Cloudflare Radar
Сканирование Cloudflare Radar сохранено · Открыть сканирование
Сохранённый снимок
Аналитика доменов
Технические деталиDNS, имена TLS и временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Криминалистическая аналитика
Анализ VirusTotal
Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание