qwe[.]pcrzdygjma[.]my

This report analyzes the domain qwe.pcrzdygjma.my, which is a cryptocurrency scam site impersonating the Coinbase brand. The page title displayed was "Coinbase," misleading visitors into believing they were on the legitimate exchange platform. The threat posed is financial fraud, where victims may be tricked into providing login credentials or sending cryptocurrency to attackers.

Technical evidence confirms this as a malicious domain. VirusTotal shows 16 detections out of 95 security vendors, with specific flags from ADMINUSLabs, BitDefender, CyRadar, ESET, and Forcepoint ThreatSeeker. The domain is registered with NameSilo, LLC, created on 2025-07-29, and hosted on IP 45.119.98.238 in Hong Kong, assigned to AS133199 SonderCloud Limited. No SSL certificate was present. The nameservers are becky.ns.cloudflare.com and conrad.ns.cloudflare.com.

The site is currently offline and unreachable. Its GridinSoft trust rating is 0 out of 100, and the DOM risk score is 10, indicating a very high risk. The single blocklist entry further supports its malicious classification. This domain poses a clear threat for cryptocurrency theft and brand impersonation.