vinescoin[.]com

vinescoin.com is a cryptocurrency phishing domain that engaged in brand impersonation, targeting users across multiple platforms. The domain has been taken offline, but it posed an elevated risk by attempting to steal credentials or funds through deceptive means. No specific drainer kit was identified, and the site impersonated a broad range of brands rather than a single entity, making it a versatile threat in the phishing landscape.

Technical indicators for vinescoin.com include a low detection rate of 1 of 95 VirusTotal vendors, with only alphaMountain.ai flagging it. The domain was registered through Tucows Domains Inc. on January 29, 2025, and resolves to IP address 172.67.129.250, which is hosted in the US by Cloudflare, Inc. (AS13335). It appears on 5 security blocklists, including PhishDestroy, ScamSniffer, and Polkadot. No SSL certificate was issued, and the page title observed was 'Authentic Oil'. The domain uses nameservers steven.ns.cloudflare.com and stevie.ns.cloudflare.com, and technologies detected include Nginx and OpenResty. Google Safe Browsing did not flag the domain, and the Gridinsoft trust score is 0 out of 100.

Given that vinescoin.com was a cryptocurrency phishing site, users who may have interacted with it should take immediate safety steps. If any credentials were entered, change passwords for all related accounts and enable two-factor authentication. For potential cryptocurrency exposure, revoke any token approvals granted to the domain and move funds to a new, secure wallet. Report the domain to relevant authorities such as the Internet Crime Complaint Center (IC3) or local cybercrime units, and monitor accounts for signs of fraud.