coinwavevault[.]org

PhishDestroy first observed coinwavevault.org on Mar 12, 2026. The captured page title is “Coinwavevault”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 74/100 (critical).

One source contains a positive finding: VirusTotal. VirusTotal recorded 3 detections among 94 engines: Gridinsoft, Netcraft, SOCRadar on Jul 18, 2026 at 20:45 UTC. Non-positive and contextual checks: Gridinsoft assigned a trust score of 1/100; no observation timestamp was retained. AlienVault OTX listed 22 community pulse references (not vendor detections) on Jul 9, 2026 at 00:40 UTC. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 06:20 UTC. Google Safe Browsing returned no flag on Mar 12, 2026 at 07:00 UTC. URLScan completed without a malicious verdict on Jul 29, 2026 at 03:13 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the domain list Dynadot LLC as the registrar and Mar 12, 2026 as the creation date. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 208.98.35.202 on AS46844 (SHARKTECH - Sharktech, US). The recorded endpoint location is Los Angeles, US. The stored server header is Microsoft-IIS/10.0. DOM analysis on Jul 28, 2026 at 02:20 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / R13 as the certificate issuer with validity through May 28, 2026; checked Mar 15, 2026 at 08:12 UTC.

Stored content provides classification context, but only one source contains a positive finding.