koin50[.]com

Analysis of koin50.com as of July 26, 2026 indicates that the domain is currently active and serving HTTP responses with status code 200. Registration data shows the domain was created through NameCheap, Inc., and its authoritative DNS is hosted on Cloudflare, using the nameservers chan.ns.cloudflare.com and nero.ns.cloudflare.com. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, demonstrating that at least one reputable anti‑phishing service has identified it as malicious. VirusTotal scanning reports that one out of ninety‑one submitted security vendors flagged the domain, providing additional corroboration of its malicious nature.

No further public intelligence such as Safe Browsing, OTX, or SSL certificate details is available in the current dataset. The limited evidence suggests a generic phishing campaign, but the specific payload, targeted brand, or victim interaction flow remains unknown. Absence of detailed page title, content analysis, or additional detection signatures prevents a more granular attribution.

Analysts should treat the domain as high‑risk based on its active status, confirmed blocklist entry, and the presence of a vendor detection. Recommended defensive actions include adding koin50.com to network and endpoint blocklists, configuring DNS filters to deny resolution, and monitoring outbound traffic for connections to the domain’s IP addresses. Continuous re‑evaluation is advised, as further indicators may emerge from future scans or threat‑intel feeds.