abrdn-defi[.]com

This domain, abrdn-defi.com, was registered on February 21, 2026 and is currently reported as taken offline. DNS resolution points to IP address 172.67.194.222, which belongs to AS13335 Cloudflare, Inc., locating the host in the United States. The TLS certificate presented for the site is identified as WE1, indicating the use of a standard Cloudflare‑issued certificate. Content analysis reveals a page title of “Web3 & Defi”, and the domain is explicitly linked to a cryptocurrency‑related scam that impersonates the Coinbase brand.

VirusTotal has recorded 12 positive detections out of 93 scanning engines, confirming that a subset of security vendors consider the domain malicious. The domain appears on a single security blocklist and has been blocked by the PhishDestroy service. Independent reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, reflecting an extreme lack of confidence in the site’s legitimacy.

The overall risk assessment is elevated due to the combination of brand impersonation, malicious detection count, and zero trust rating. Defenders should continue to block any network traffic to the resolved IP address, enforce URL filtering rules that include abrdn-defi.com, and monitor for related indicators such as the WE1 certificate fingerprint and the Cloudflare ASN. Although the site is currently offline, the infrastructure—particularly the Cloudflare front‑end—could be reused for future campaigns, so continued observation of the associated IP and certificate is advised.