Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
coinsbasenews[.]com
“coinbase blog | Coinbase account verification”
Сводка доказательств
The domain coinsbasenews.com is a phishing site engaged in brand impersonation targeting Coinbase, a major cryptocurrency exchange. It poses as a legitimate Coinbase blog or account verification page to deceive users into disclosing login credentials or other sensitive information. No cryptocurrency drainer kit was detected, but the site is classified as a cryptocurrency scam. As of the latest verification, coinsbasenews.com has been taken offline.
Technical indicators confirm the malicious nature of coinsbasenews.com. The domain was registered through Wix.com Ltd. on March 10, 2026, and resolves to the IP address 185.230.63.186, hosted by Wix.com Ltd. in the US. It is flagged by 1 of 95 VirusTotal security vendors and appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt (R13), and the observed page title was 'coinbase blog | Coinbase account verification'. The site employed technologies such as Wix, React, and Google Cloud, and returned an HTTP 404 status when accessed.
Users who interacted with coinsbasenews.com should immediately change their Coinbase passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity and report any fraudulent transactions to Coinbase support. To report the phishing domain, submit it to Google Safe Browsing, the Anti-Phishing Working Group (APWG), and the impersonated brand (Coinbase) for further investigation. Revoking active token approvals is unnecessary as no drainer kit was detected.
Снимок отправленных доказательств
- Отправлено
- Записи журнала
- 1
- ID дела
PD-20260310-287C6C- PDF-файл
- PDF с доказательствами
Правовое основание
Полный текст доказательств
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (IN):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and IN's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Процесс реагирования на угрозы
Проверка по блок-листам
10 внешних источников под наблюдением · снимок от 13.08.2026
8 внешних источников под наблюдением Совпадений нет
Сохранённый снимок
Аналитика доменов
Технические деталиDNS, имена TLS и временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Технологии
Выявлено 9 технологий с высокой уверенностью
Анализ VirusTotal
Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание