coinbeit-io[.]vip

The domain coinbeit-io.vip was registered on 16 January 2026 through Gname.com Pte. Ltd. and points to the IP address 38.85.201.82, which belongs to AS8796 FASTNET DATA INC in the United States. The host resolves to an Nginx web server that advertises HTTP/3 support, HSTS enforcement, and a front‑end built with Vue.js and the Marked library. The site presents the page title “Coinbeit”, but no further content analysis is available. The certificate is a Let’s Encrypt R13 certificate, indicating the site used a free TLS service.

Reputation checks show a Gridinsoft trust score of 0 out of 100, and Google Safe Browsing flags the domain for social engineering. VirusTotal reports that 16 of 93 security vendors have flagged the domain, corroborating the malicious assessment. The domain appears on three public security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, confirming that security products recognize it as a threat. The nameservers b9.share-dns.net and a9.share-dns.com are typical of shared hosting providers and do not provide additional mitigation.

As of the report date, the site is taken offline, but the infrastructure remains observable and could be re‑activated. Defenders should add coinbeit-io.vip to firewall and DNS filtering rules, monitor the associated IP range for future activity, and consider sinking any inbound traffic to the identified nameservers. Continuous re‑scanning of the domain and its IP is advised to capture any changes in hosting or certificate usage. Organizations that handle cryptocurrency or user credentials should treat any traffic to this domain as malicious and block it at the network perimeter.