coinassetinvest[.]com

coinassetinvest.com was observed on 2026-07-12 as an active malicious site. The domain was registered on 2025-01-09 through Sav.com, LLC and currently resolves to IP 198.12.80.250, hosted by AS36352 (HostPapa) in the United States. The site presents an HTTP 302 redirect and serves a TLS certificate from Let’s Encrypt with an E7 identifier. The only visible page title is “coinassetinvest.com - About Us”. Scamadviser assigns a trust score of 1/100, indicating extreme low credibility.

VirusTotal analysis shows that 10 out of 95 scanned security vendors flag the domain as malicious. The domain appears on one public security blocklist and is listed as blocked by PhishDestroy. The threat type is recorded as an investment scam, aligning with the domain name’s suggestion of financial services. Only a single nameserver is listed, which is typical for domains hosted on shared services.

The combination of a low trust score, a high‑risk rating, and multiple vendor detections suggests a purposeful phishing or fraud operation targeting investors. The presence of a 302 redirect may be used to route victims to credential‑harvesting pages or to hide the final payload location. However, the content behind the redirect has not been captured, so the exact phishing kit or credential‑capture mechanism remains unknown.

Defenders should add 198.12.80.250 to network deny lists and block DNS resolution for coinassetinvest.com at perimeter controls. Monitoring of outbound connections to the HostPapa AS for anomalous activity is advised. Since the domain is already listed on PhishDestroy, updating internal blocklists and threat intelligence feeds will reduce exposure. Continuous re‑evaluation is recommended in case the infrastructure changes or additional indicators emerge.