coin-strike-pro[.]space

This domain, coin-strike-pro.space, was identified as a cryptocurrency credential phishing site designed to deceive users into disclosing wallet login credentials, private keys, or recovery phrases. The site mimicked legitimate cryptocurrency platforms by presenting a polished interface under the page title 'Coin Strike,' targeting individuals involved in digital asset transactions. Such phishing operations commonly lead to unauthorized access to cryptocurrency wallets, resulting in financial theft and irreversible loss of funds due to the decentralized nature of blockchain transactions. Analysis indicates the domain was registered on February 21, 2026, through NameCheap, Inc., a registrar frequently utilized in phishing campaigns due to its accessibility and low-cost domain registration services. Detection data from VirusTotal reveals that 3 out of 95 security vendors flagged the domain as malicious, while it appears on one additional security blocklist. The domain resolved to the IP address 172.67.130.35, a Cloudflare-hosted endpoint, which is often employed to obfuscate the true origin of malicious infrastructure. SSL certification was provided by Google Trust Services, a common practice among threat actors to lend an appearance of legitimacy to fraudulent sites. Users who visited coin-strike-pro.space or entered credentials on the site should assume their information has been compromised. Immediate actions include revoking access to any linked cryptocurrency wallets, transferring remaining funds to a new secure wallet, and enabling multi-factor authentication where available. It is also recommended to monitor transaction histories for unauthorized activity and report the incident to relevant financial or cybersecurity authorities. Given the elevated risk level and offline status of the domain, affected users should remain vigilant for follow-up phishing attempts via email, social media, or other communication channels.