monetary.coin999.vip
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of monetary.coin999.vip
The domain monetary.coin999.vip appears to host a cryptocurrency-themed login page. Based on the screenshot, it presents itself with Coinbase branding and asks visitors to sign in using email or phone credentials. The page design is minimal and focused almost entirely on credential entry rather than on broader product, company, or support information.
The domain name itself does not appear to match the official web presence typically associated with Coinbase, and the site is hosted under a subdomain on coin999.vip rather than on a recognizable corporate domain. Based on the available content and naming pattern, this page may be intended to attract users looking for cryptocurrency account access rather than to provide a full standalone financial service operated under a clearly identified business entity.
Safety Assessment for monetary.coin999.vip
This website shows multiple risk indicators at the time of this scan. It was flagged by 17 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. The screenshot also shows a login page using Coinbase branding on an unrelated domain, which may indicate an attempt to imitate a well-known cryptocurrency platform and collect user credentials.
Additional scan data adds to the concern. The domain is very new at 11 days old, has no established traffic ranking, and a malware scan reported suspicious elements in several local files and links. One threat-database check also showed a listing, and the domain's IP address is listed on one mail-reputation blocklist; while that IP-based listing alone would be a weaker signal, it appears alongside broader phishing-related detections here.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate provider and is served through Cloudflare infrastructure, with nameservers pointing to Cloudflare and a server IP in the 188.114.96.0 range. A valid certificate indicates encrypted transport, but it does not by itself verify that the operator or page content is trustworthy. DNSSEC appears to be unsigned.
From a technical perspective, the domain is newly registered, uses a shared reverse-proxy/CDN setup, and includes several flagged internal assets and suspicious URL patterns identified during scanning. The combination of recent registration, brand-themed login content, and suspicious file/link findings may warrant caution at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?