coinhive.com

Dangerous 104.18.29.80 En ligne
Last checked 1 hour, 38 minutes ago · Aug 19, 2026 12:24 PM UTC · First scanned Aug 19, 2026
Established domain Popular website SSL valid Suspicious Malicious WHOIS hidden
Alexa: #492944 Statvoo: #492944 Majestic: #315714 Cisco Umbrella: #978069 Cloudflare Radar: #500000
0 Risk Score

Dangerous

Domain Age 5008 days
Headers Grade B security
SSL Certificate Valid certificate
VT Score 0/0 engines
Blacklists 1 flagged
Wayback 2966 snapshots

This site has been flagged as Dangerous

Have you been scammed by this site? Report it to help protect others.

Collective Action

Join other victims to file a collective complaint against this domain. The more people join, the stronger the case. Your information is kept confidential and only shared with authorities if the action is formally submitted.

0
participants
0 €
total reported losses
0/5
threshold
Screenshot of coinhive.com — Dangerous website captured on August 19, 2026

Screenshot captured by ScamSandbox — click to enlarge

Server Location
Location
San Francisco, United States
IP
104.18.29.80
Hosting
Cloudflare, Inc.
Share: Twitter Facebook LinkedIn
Certified Report JSON CSV
Is this site safe?

Do not visit this site. Do not enter any personal information.

The domain owner uses WHOIS privacy protection, hiding their identity. **10 out of 91 security engines** on VirusTotal flag this site as malicious. Detected as **malicious** by alphaMountain.ai, AutoShun, CyRadar and 2 others. Detected as **malware** by Fortinet, Kaspersky, Sophos.

✓ Domain Age: 13+ years — well established ✗ WHOIS Privacy: Owner identity hidden • Registrar: 1API GmbH ✓ SSL Certificate: Valid, expires in 82 days ✗ VirusTotal: 10/91 engines flag as malicious ✗ VT: malicious: alphaMountain.ai, AutoShun, CyRadar and… ✗ VT: malware: Fortinet, Kaspersky, Sophos ✗ VT: phishing: Certego, SafeToOpen ✗ VT: suspicious: Forcepoint ThreatSeeker • Payment Form: Payment form detected ✗ Legal Pages: No privacy policy or terms • CMS: Ghost ✗ Typosquatting: Resembles: coinbase ✓ Web Archive: 2966 snapshots ✗ Redirects: Redirects to different domain
Found on 1 blacklist
+15
No email server (MX record)
+5
Missing SPF or DMARC
+5
Flagged by 4+ antivirus engines
+30
VirusTotal: Malicious detected by 5 engines
+40
VirusTotal: Malware detected by 3 engines
+32
VirusTotal: Phishing detected by 2 engines
+36
VirusTotal: Suspicious detected by 1 engines
+24
Suspicious redirect chain
+15
No privacy policy
+5
Established domain (5+ years)
-10
Popular website
-5
1 time scanned on ScamSandbox

Correlated domains

These domains share multiple infrastructure or registration signals with this domain — a pattern common in coordinated scam networks.

api.2go.xyz 2014-06-0…
Same IP
lenzing-dev2.jdadelivers.com 2010-04-2…
Same IP
lineagem.tw 2021-06-0…
Same IP
macpinc.com 2004-06-1…
Same IP
maiinvest.com 2013-03-1…
Same IP

Domain Timeline

Info Warning Critical 6 events
Dec 1, 2012 Today
Domain Created

Domain coinhive.com was registered.

WHOIS
Domain Updated

Domain coinhive.com WHOIS record was updated.

WHOIS
SSL Certificate Issued

SSL certificate issued by Google Trust Services.

SSL Check
Flagged by VirusTotal

Flagged by 10 engines as malicious and 1 as suspicious on VirusTotal.

VirusTotal
SSL Certificate Expires

SSL certificate will expire.

SSL Check
Domain Expires

Domain coinhive.com is set to expire.

WHOIS
Domain Age
5008 days old - Established domain
WHOIS Privacy
Registration details are hidden behind privacy protection
Email Security
No SPF or DMARC records found
Typosquatting
Possible typosquatting of a known domain
Contact Info
Contact information found
Privacy Policy
No privacy policy detected
Redirects
3 redirects - Suspicious redirect pattern
Security Headers
B Grade
Security Score 75%
referrer_policy no-referrer-when-downgrade
x_frame_options Not set
x_xss_protection 1; mode=block; report=https://troyhunt.report-uri.com/r/d/xss/enforce
permissions_policy accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), mic…
x_content_type_options nosniff
content_security_policy default-src 'none'; connect-src 'self' api.passwordpurgatory.com bloghelpers.tr…
strict_transport_security max-age=31536000; includeSubDomains; preload
cross_origin_opener_policy Not set
Missing: X-Frame-Options, Cross-Origin-Opener-Policy
Server: cloudflare
SSL Certificate
Issuer Google Trust Services
Valid From N/A
Valid Until N/A
Days Until Expiry 82 days
Subject Alternative Names
coinhive.com *.coinhive.com
Redirect Chain
https://coinhive.com
301
https://www.troyhunt.com/i-now-own-the-coinhive-domain-heres-how-im-fighting-cryptojacking-and-doing-good-things-with-content-security-policies
301
https://www.troyhunt.com/i-now-own-the-coinhive-domain-heres-how-im-fighting-cryptojacking-and-doing-good-things-with-content-security-policies/
Content Analysis

Trust Signals

✓ Contact ✓ Social ✗ Privacy Policy ✗ Terms

Threat Signals

— Login Form ⚠ Payment Form Urgency: 0 — Hidden Elements — Iframes
Domain Mindmap
coinhive.com
DNS
A: 104.18.29.80A: 104.18.28.80 NS: jo.ns.cloudflare.com.NS: guy.ns.cloudflare.com.
Server
cloudflare CDN: Cloudflare
Technologies
Ghost Google AnalyticsFacebook Pixel
Ports
80 (HTTP) 443 (HTTPS) 8080 (HTTP-alt) 8443 (HTTPS-alt)
Related
164 domains Cloudflare, Inc. Shared Hosting
Shared IP
1000inwmoviehot.blogspot.com 2go.xyz adminapi-feature-kb4-14577-social-email-verify.k8.kkstr.com adminapi-feature-kb4-15143-login-registration-ab-testing.k8.kkstr.com afghankitchenrecipes.blogspot.com akillitarife.com angourieresort.com.au api-feature-kb4-14283-world-cup-support-live-pitch.k8.kkstr.com +156 more

Domain Relationships

Sources: RapidDNS · urlscan.io · ipapi.co

Cloudflare, Inc. ⚠ Shared Hosting
1000inwmoviehot.blogspot.com 2go.xyz adminapi-feature-kb4-14577-social-email-verify.k8.kkstr.com adminapi-feature-kb4-15143-login-registration-ab-testing.k8.kkstr.com afghankitchenrecipes.blogspot.com akillitarife.com angourieresort.com.au api-feature-kb4-14283-world-cup-support-live-pitch.k8.kkstr.com api-feature-kb4-14285-boosts-team-center.k8.kkstr.com api.2go.xyz api.kkstr.com api.lemonway.fr.cdn.cloudflare.net araguaina.1doc.com.br araguaina.to.gov.br asikanjakarta.blogspot.com auf-zu.blogspot.com backoffice.lemonway.fr.cdn.cloudflare.net barbaragoldsmith.com bfgroup.com bigtaka.live birlikte.akillitarife.com blog.manscaped.io blogvertize.blogspot.com bose.us.org canalcointech.blogspot.com cdn.manscaped.io cedarstonebankinvestments.com clinect.com.au corsaautomirror.blogspot.com cpanel.angourieresort.com.au cpcalendars.angourieresort.com.au cpcontacts.angourieresort.com.au cpl.araguaina.to.gov.br dev.akillitarife.com dizibekcileri.blogspot.com docs-feature-kb4-16479-betting-partner.k8.kkstr.com documentation.lemonway.fr.cdn.cloudflare.net ecdocs.bfgroup.com echotuts.blogspot.com evaluation.pcieerd.dost.gov.ph fia.araguaina.to.gov.br forfunforlifetw.blogspot.com freebitcoinearningtricks.blogspot.com gamegamboge.blogspot.com gamesnayr.blogspot.com gigasoftdown.blogspot.com hackeranonymousvietnam.blogspot.com hesapla.akillitarife.com higgs7745.com homesteadmoderndentistry.com houseyoung.cn imperialselect-midrand.co.za iniwisataindonesiaku.blogspot.com intranet.araguaina.to.gov.br intranett.enova.no iss.araguaina.to.gov.br japan-video-topics-espanol.blogspot.com juegosdecachorros.blogspot.com karsilastirma.akillitarife.com kotr-seo.blogspot.com launch.sg.manscaped.io lcscript.blogspot.com leis.araguaina.to.gov.br lenzing-dev2.jdadelivers.com lineagem.tw lubian.com lungugeorge.blogspot.com macpinc.com maiinvest.com mail.angourieresort.com.au mail.imperialselect-midrand.co.za mail.marketingmindxchange.com marketingmindxchange.com mattcusimano.com mayblog8855.blogspot.com maytubei.blogspot.com mfgilekimya.blogspot.com missfashionstuknieta.blogspot.com moderniza.araguaina.to.gov.br mr-branding.blogspot.com mydocs.bfgroup.com naering.enova.no naring.enova.no nemakerak.blogspot.com nett.enova.no newstrends999.blogspot.com nfe2013.araguaina.to.gov.br nubellena.blogspot.com ofweddingwebsite.blogspot.com oma.bfgroup.com pasajesaereosonline.blogspot.com paychexcyberliability1mm.com pcieerd.dost.gov.ph peaksavingsplanwa.com pesca.araguaina.to.gov.br pmis.pcieerd.dost.gov.ph poetrapetjir.blogspot.com pokemon-go-thailand.blogspot.com portablegpstracker99.blogspot.com portal.manscaped.io presse.enova.no prm.lemonway.fr.cdn.cloudflare.net proadmin.araguaina.to.gov.br proboxnatv.blogspot.com projects.pcieerd.dost.gov.ph sandbox-api.lemonway.fr.cdn.cloudflare.net sandbox-webkit.lemonway.fr.cdn.cloudflare.net school-shop.su seplan.araguaina.to.gov.br smartskip.com.au socolivedd.tv socolivehh.io sou-android-apk.blogspot.com spa.dayspasa.co.za staging.au.manscaped.io staging.blog.manscaped.io staging.ca.manscaped.io staging.eu.manscaped.io staging.sg.manscaped.io staging.us.manscaped.io staging.za.manscaped.io storybook.manscaped.io subscriptions.manscaped.io test.akillitarife.com theaxiomgroup.org themiamineurosciencesinstitute.com thepsci.eu thorn-eco.eu toko-bahankimia.blogspot.com tommy-gunn-sex-pill-king.com toolkit.bfgroup.com tr3svc.com tronicastore.blogspot.com ultracane.com vacina.araguaina.to.gov.br vianode.com vittack-template.blogspot.com way2gulf.blogspot.com webdisk.angourieresort.com.au webkit.lemonway.fr.cdn.cloudflare.net webmail.angourieresort.com.au ws.lemonway.fr.cdn.cloudflare.net www.akillitarife.com www.angourieresort.com.au www.bfgroup.com www.bon-bouquet.ru www.bose.us.org www.clinect.com.au www.coinhive.com www.enfotec.com www.enfotec.com.cdn.cloudflare.net www.imperialselect-midrand.co.za www.lexingtonfinancial.net.cdn.cloudflare.net www.lineagem.tw www.lubian.com www.macpinc.com www.mapbusiness.ma www.smartskip.com.au www.surmesure-menuiserie.fr www.theaxiomgroup.org www.tommy-gunn-sex-pill-king.com www.troyhunt.com www.wow-cook.ru yobs.com
WHOIS Information
Registrar 1API GmbH
Created 2012-12-01T15:08:39
Expires 2029-12-01T15:08:39
Updated 2025-11-23T05:24:07
Registrant Country AU
Name Servers
guy.ns.cloudflare.com jo.ns.cloudflare.com
Port Scan
80 HTTP
443 HTTPS
8080 HTTP-alt
8443 HTTPS-a…

External Trust Scores

Average: 86.0%
72/100
Gridinsoft
72/100
Clean
PhishTank
Clean

Also check on:

2 sites checked. Scores are fetched directly from each platform.

Community Intelligence

Mixed

10 mentions found across community sources (10 neutral).

0 positive 10 neutral 0 negative

https://coinhive.com/lib/coinhive.min.js na & lol

I had 100% cpu utilization a bit after I opened the link. I inspected it and found workers for coinhive.com. I closed the tab after that and cpu utilization dropped.

http://coinhive.com/ also offers this but users do not seem to like it. They offer two miners, one which only operates with users consent and another one without explicit consent. Ei…

I'm not sure I understand that, why go through the trouble of setting up random domains to bypass filters if you then load https://coinhive.com/lib/coinhive.min.js directly…

Ok, this is similar to Gridcoin ( https://gridcoin.io/ ) , Golem ( https://cryptoslate.com/coins/golem/ ) , SPARC ( https://sparc.network/ ) , e…

Or add https://coinhive.com which will put a load on the client and make you a bit of money. Can be used like a captcha or placed in between a process. You just specify how many hashes ne…

I noticed that the nazi/terror/nationalistic organisation Nordic Resistance Movement uses https://coinhive.com , since they probably can't use ads. Coinhive apparently takes…

> After enabling the Mikrotik RouterOS HTTP proxy, the attacker uses a trick in the configuration by redirecting all the HTTP proxy requests to a local HTTP 403 error page, and in this error page…

their own statement: The drop in hash rate (over 50%) after the last Monero hard fork hit us hard. So did the “crash“ of the crypto currency market with the value of XMR depreciating over 85% withi…

TLDR: he bought coinhive.com! very cool

Sources checked: Hacker News PhishTank
Threat Intelligence Sources
VirusTotal Clean
0/0 engines
View on VirusTotal →
AbuseIPDB Clean
0% confidence
Wayback Machine
First Seen N/A
Last Seen N/A
Total Snapshots 2966
Google Index & SEO
Robots.txt Missing
Sitemap Missing
Index Score N/A

Community Reports

No community reports yet for coinhive.com. Be the first to share your experience.

What is coinhive.com?

coinhive.com is a website that was analyzed by ScamSandbox on August 19, 2026. Based on our automated analysis across 20 security sources, the domain has been classified as dangerous with multiple high-confidence threat detections across independent security databases.

The domain was registered approximately 5008 days ago through 1API GmbH and the registrant is located in AU. The domain's age suggests it has been operational for some time, which is a positive trust signal. The owner's registration details are hidden behind a WHOIS privacy service, which prevents public identification of who operates the site.

ScamSandbox cross-referenced coinhive.com against the VirusTotal database, which aggregates results from multiple security vendors. No security vendor in the VirusTotal database has flagged this domain as malicious or suspicious, which is a positive trust indicator.

The site uses a valid SSL/TLS certificate issued by Google Trust Services . An SSL certificate encrypts data between the visitor and the server, but it does not guarantee the site is legitimate — scammers routinely obtain free SSL certificates for fraudulent sites.

coinhive.com is hosted by Cloudflare, Inc. at IP address 104.18.29.80 . The server uses shared hosting, meaning multiple websites share the same IP address — a configuration common among both budget legitimate sites and disposable scam domains.

The overall risk score assigned to coinhive.com by ScamSandbox is 100/100 (where 100 is the highest risk). This score is calculated by weighing signals from blacklist detections, domain age, WHOIS data, SSL certificate validity, HTTP security headers, content analysis, and community reports.

Security Provider Verdicts for coinhive.com

The table below shows the verdict from each major security provider checked during this scan. A Flagged result means the provider detected malicious, phishing, or abusive activity. Clean means no threat was detected. Not checked means the source was unavailable or not queried during this scan.

VirusTotal Aggregated results from 80+ antivirus engines
Clean
Google Safe Browsing Google's real-time phishing and malware database
Not checked
PhishTank Community-verified phishing URL database
Not checked
URLhaus Malware distribution URL tracking by abuse.ch
Not checked
AbuseIPDB IP address abuse reports and blacklist
Clean
Community Reports User-submitted scam reports on ScamSandbox
No reports
Web Intelligence Reddit, forums, and scam-reporting platforms
No negative mentions

What to do if you visited coinhive.com

If you have already visited coinhive.com or interacted with this site, take these steps immediately to protect yourself:

  1. Do not enter any personal information — close the browser tab immediately.
  2. Change your passwords if you entered login credentials on this site, especially if you reuse the same password elsewhere.
  3. Contact your bank or card provider if you made a payment — request a chargeback and report the fraudulent transaction.
  4. Run a malware scan on your device using a trusted antivirus tool to check for any malicious software that may have been installed.
  5. Report the scam to your national consumer protection agency (e.g., FTC in the US, Action Fraud in the UK, DGCCRF in France).
  6. Monitor your accounts for unusual activity over the next 30–90 days and consider placing a fraud alert with your credit bureau.

Frequently Asked Questions about coinhive.com

No — coinhive.com is not safe. ScamSandbox classified this domain as dangerous with a risk score of 100/100, based on multiple confirmed detections across independent threat intelligence databases. Do not enter any personal, financial, or login information on this site.

ScamSandbox assigned coinhive.com the verdict "Dangerous" based on a weighted combination of signals including:

  • Hidden WHOIS registration details — the owner's identity is concealed
  • No privacy policy found — required by law in most countries for sites collecting user data
  • Shared hosting environment — the server IP is shared with 164 other domains
  • Overall risk score of 100/100 after weighing all signals

Note: ScamSandbox uses automated analysis — while these signals indicate elevated risk, they do not constitute definitive proof of fraud. Always verify independently before drawing final conclusions.

ScamSandbox performs a multi-layered automated analysis of coinhive.com in real time, querying 20 independent security sources simultaneously. The process includes:

  • Blacklist checks — VirusTotal, Google Safe Browsing, PhishTank, URLhaus, and AbuseIPDB
  • WHOIS and domain intelligence — registration date, registrar, registrant country, privacy status
  • SSL/TLS analysis — certificate validity, issuer, and expiration
  • DNS record analysis — A, MX, NS records, SPF and DMARC email security configuration
  • HTTP security headers — Content-Security-Policy, X-Frame-Options, HSTS, and other browser security directives
  • Content analysis — detection of login forms, payment forms, urgency language, and suspicious content patterns
  • Community intelligence — mentions on Reddit, scam-reporting forums, and user-submitted reports
  • Infrastructure analysis — hosting provider, IP geolocation, reverse IP lookup, and typosquatting detection
All results are combined into a single risk score from 0 (no risk) to 100 (maximum risk).

Based on public WHOIS records, coinhive.com was registered on 2012-12-01T15:08:39 through 1API GmbH. The registrant's identity is protected by a WHOIS privacy service, which means the true owner's name, address, and contact details are not publicly available. While WHOIS privacy is also used by legitimate site owners who want to avoid spam, it is also commonly used by fraudulent operators to hide their identity.

The site's server is operated by Cloudflare, Inc. . The hosting provider is separate from the domain registrar and does not necessarily identify the person who controls the website.

Yes. If you have personally experienced fraud, phishing, or deceptive practices from coinhive.com, you can submit a community report directly on this page using the "Submit a Report" button in the Community Reports section above. Your report helps other users make informed decisions and contributes to our threat intelligence database.

You can also report the site to official authorities:

  • Google Safe Browsing — report phishing at safebrowsing.google.com/safebrowsing/report_phish/
  • PhishTank — submit phishing URLs at phishtank.org
  • FTC (US) — file a complaint at reportfraud.ftc.gov
  • Action Fraud (UK) — report at actionfraud.police.uk
  • DGCCRF (France) — report at signal.conso.gouv.fr