coinrule[.]live

Analysis as of July 24, 2026 indicates that the domain coinrule.live was registered on February 21, 2026 through NameCheap, Inc. The zone is served by the nameservers dns1.registrar-servers.com and dns2.registrar-servers.com and resolves to the IPv4 address 152.42.217.239, which belongs to AS14061 DigitalOcean, LLC located in Singapore. No TLS certificate is presented, implying that the site was reachable only over HTTP. The page title returned by the HTTP response is "CoinRule - Official Platform | AI Trading 2025 | Over 10,000 Reviews", a phrasing that attempts to mimic a legitimate cryptocurrency‑trading service. The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy service.

VirusTotal analysis shows that 2 of 93 scanned security vendors flagged the domain, suggesting a low but non‑zero detection rate. The current operational status is offline, which may be the result of takedown actions or temporary hosting changes. The available evidence confirms that the infrastructure is typical of a recently created phishing site: a short‑lived registration, use of a generic registrar, hosting on a cloud provider, and absence of HTTPS.

However, the limited number of blocklist listings and the modest VirusTotal detection count leave uncertainty regarding the scale of any ongoing campaign or the presence of additional malicious payloads. Defenders should continue to block coinrule.live at network perimeter devices, update URL filtering rules, and monitor for any resurgence of the same IP or nameserver pair. Additional investigation, such as requesting the full HTTP response body and checking for credential‑stealing forms, would be required to determine the exact phishing vector employed.