gmnm[.]org

Analysis indicates that the domain gmnm.org was registered on 2 July 2025 through Gname.com Pte. Ltd. and resolves to the Cloudflare‑owned address 172.67.193.197 (AS13335, United States). The site is protected by a Google Trust Services certificate (WE1) and serves content over HTTP/3 via Cloudflare, with front‑end technologies identified as Vue.js and Cloudflare Browser Insights. An HTTP 503 response was observed, and the page title returned “OTC Markets”, which does not correspond to the claimed brand target of Coinbase. The domain has been classified as a crypto‑scam and specifically as brand impersonation of Coinbase.

Reputation signals are extremely low, with a Gridinsoft trust score of 1 / 100, and the domain appears on two independent blocklists, having been blocked by PhishDestroy and ScamSniffer. VirusTotal scans show that three of ninety‑five security vendors flagged the domain, reinforcing the malicious assessment. Current operational status is offline, suggesting the site has been taken down or is temporarily unavailable. Uncertainty remains regarding the exact content that was hosted before the 503 status, as no visual or functional analysis is available.

The presence of a legitimate‑looking SSL certificate does not mitigate the risk, given the malicious intent indicated by the blocklist listings and vendor detections. Defenders should continue to block the domain at network perimeter, update URL filtering policies, and monitor for any re‑hosting on alternative IPs or CNAMEs. Threat‑intel consumers should treat any communications purporting to originate from gmnm.org as fraudulent, especially those claiming to be from Coinbase, and advise users to verify URLs against official Coinbase domains.