webmail[.]certificate-coinbase[.]com
“Roundcube Webmail :: ברוך בואך אל Roundcube Webmail”
证据摘要
This report details a threat domain identified as webmail.certificate-coinbase.com. The site's page title, "Roundcube Webmail :: ברוך בואך אל Roundcube Webmail," indicates it presented a Hebrew-language webmail login interface. The domain impersonates the Coinbase cryptocurrency brand and is classified as a cryptocurrency scam. The primary threat is credential harvesting, as the site likely aimed to capture login credentials from users expecting a legitimate Coinbase or email service.
Technical analysis confirms the domain as malicious. VirusTotal reports 10 out of 95 security vendors flagged the domain as malicious. It is listed on 1 blocklist. The domain was registered with Dynadot LLC, created on 2025-10-13, and resolves to IP address 188.114.96.3 located in the United States, hosted by AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. Nameservers are kevin.ns.cloudflare.com and maria.ns.cloudflare.com.
The domain is currently DOWN/OFFLINE. GridinSoft trust rating is 0/100, confirming high risk. The domain is flagged by ChainPatrol, BitDefender, CRDF, Forcepoint ThreatSeeker, and Fortinet. Given the active detections and impersonation of a major brand, the historical risk level is assessed as high.
Data Coverage
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月11日
检测时间线
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
Registration: certificate-coinbase.com
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain certificate-coinbase.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控