hotscoin[.]biz

The domain hotscoin.biz is a confirmed phishing site engaged in brand impersonation targeting the ton cryptocurrency platform. It was designed to deceive users into believing they were interacting with a legitimate service, potentially leading to unauthorized access to accounts or financial loss. As of the latest verification, hotscoin.biz has been taken offline, though its prior activity remains a risk for those who may have encountered it.

Technical analysis of hotscoin.biz reveals limited but notable detection. The domain was flagged by 1 of 95 security vendors on VirusTotal, including CRDF, and appeared on 1 security blocklist (PhishDestroy). It was registered on August 21, 2024, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolved to the IP address 172.67.144.17, hosted by Cloudflare in the US. No SSL certificate was present, and the observed page title was 'Hotcoin'. The domain used a single nameserver and was not flagged by Google Safe Browsing, though Gridinsoft assigned it a trust score of 30 out of 100.

Users who visited hotscoin.biz should immediately change any passwords associated with their ton or cryptocurrency accounts, enable two-factor authentication (2FA), and monitor for unauthorized transactions or account activity. If cryptocurrency interactions occurred, revoking token approvals and transferring funds to a new wallet is recommended. Report the domain to relevant platforms, including the impersonated brand (ton), the registrar (PublicDomainRegistry.com), and anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group (APWG) to aid in mitigation efforts.