coinnaissad[.]com

Analysis of coinnaissad.com indicates a cryptocurrency scam impersonating Coinbase, operational since October 25, 2025, and currently offline as of July 24, 2026. The domain was registered through HOSTINGER operations, UAB, and resolves to IP 157.173.208.67, hosted under AS47583 (Hostinger International Limited) in the United States. Infrastructure analysis reveals the use of nameservers ns1.dns-parking.com and ns2.dns-parking.com, a configuration often associated with low-cost or automated domain setups. No SSL certificate was detected, increasing the risk of unencrypted data transmission. The page title, 'Regulated Digital Asset Platform | Coinbase Alternative | Secure Crypto Exchange,' explicitly positions the site as a Coinbase substitute, aligning with the reported scam type of crypto fraud.

Detection metrics show limited but targeted flagging: five of ninety-five security vendors on VirusTotal identified the domain as malicious, while PhishDestroy has actively blocked it. The domain appears on at least one security blocklist, and Google Safe Browsing classifies it under social engineering. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification. No evidence of a phishing kit or additional infrastructure components (e.g., redirectors, C2 servers) is present in the available data.

Defenders should prioritize blocking the domain and its resolving IP (157.173.208.67) at the network level, particularly in environments handling cryptocurrency transactions. Given the domain's offline status, monitoring for re-registration or DNS changes is recommended, as threat actors may reuse the infrastructure. Security teams should also review logs for prior connections to this IP or domain, as its activity window spanned nearly nine months. While the exact content of the site remains unanalyzed, the combination of brand impersonation, crypto-themed messaging, and low detection coverage suggests a targeted campaign with potential for resurgence.