hotcoin-login[.]at
“Hotcoin Login Access Guide — Sign In Flow, Exchange Entry”
hotcoin-login.at — Contenido no disponible. Suplantación de marca: Across; Tipo de estafa: Fake Exchange. Resumen de las pruebas: VirusTotal 13/93 (ADMINUSLabs, CRDF, CyRadar, Emsisoft, Forcepoint ThreatSeeker); Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 89/100. Registrador: Iqweb.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of the domain hotcoin-login.at indicates it was a credential-phishing site targeting cryptocurrency exchange users. The domain was registered on February 27, 2026, through registrar Iqweb, with nameservers hosted on Cloudns (pns71.cloudns.net, pns72.cloudns.com, pns73.cloudns.net, pns74.cloudns.uk). Infrastructure analysis reveals the site resolved to IP 186.2.175.29, located in Belize (BZ) under AS59692 (IQWeb FZ-LLC). No SSL certificate was detected, increasing the risk of unencrypted credential transmission.
The page title, 'Hotcoin Login Access Guide — Sign In Flow, Exchange Entry,' explicitly references a login process, suggesting an attempt to mimic a legitimate exchange portal. The domain was flagged by 13 of 93 security vendors on VirusTotal and appears on at least one security blocklist (PhishDestroy). Gridinsoft assigned a trust score of 0/100, reinforcing its classification as malicious. Detected technologies include Ant Design, jQuery, Hammer.js, and DDoS-Guard, which may have been used to enhance the site's functionality or evade detection.
As of July 24, 2026, the domain is offline, but residual risk remains for users who may have interacted with it prior to takedown. Defenders should treat this domain as part of a broader fake exchange campaign and monitor for related infrastructure, such as similarly named domains or shared hosting providers. The absence of an SSL certificate and the use of bulletproof hosting (DDoS-Guard) further support its malicious intent. No additional brand confirmation beyond the page title is available, and the exact content of the phishing kit remains unanalyzed.
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Tecnologías · 4 identified
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Análisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of hotcoin-login.at · checked Mar 2, 2026
Datos y informes externos
PD-20260227-E78D1F Recipient: abuse@iqweb.io ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.