coinsbear[.]com

coinsbear.com is a domain involved in a brand impersonation phishing scam targeting the Ethereum brand. The site presented itself as a cryptocurrency exchange platform but is currently taken offline. No drainer kit was identified in association with this domain, leaving the precise scam mechanism under investigation. Users searching whether coinsbear.com is safe should consider it a phishing threat impersonating Ethereum to deceive victims.

The domain coinsbear.com was created on 2024-07-21 15:40:46 and is registered through NameCheap, Inc. It resolves to IP address 172.67.145.6 located in the US under AS13335 Cloudflare, Inc. The SSL certificate is issued by GoDaddy.com, Inc. via the Go Daddy Secure Certificate Authority - G2. Despite having 0 of 95 VirusTotal vendors flagging it and no Google Safe Browsing alerts, the domain appears on 1 security blocklist, PhishDestroy. The site utilized technologies including Node.js, Envoy, Express, HSTS, and services from Akamai. Trust scores from Gridinsoft and Scamadviser are low at 30/100 and 1/100 respectively.

Users who may have interacted with coinsbear.com should take precautionary measures such as changing passwords and enabling two-factor authentication on related accounts due to the phishing threat. Monitoring financial accounts for unauthorized activity is advised. Any suspected fraud should be reported to relevant cybersecurity authorities and the hosting registrar, NameCheap, Inc. Since the domain impersonated Ethereum, extra vigilance is recommended for Ethereum wallet security. Reporting the scam to blocklists like PhishDestroy helps prevent further victimization.