coin-strike-app[.]sbs

coin-strike-app.sbs is currently resolved to the Cloudflare edge address 104.21.58.106 and is served through the authoritative name servers sergi.ns.cloudflare.com and teresa.ns.cloudflare.com. The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, indicating a valid HTTPS configuration. Registration records show the domain was purchased via NameCheap, Inc. The host is listed on three external blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reflecting a consensus among threat‑intel feeds that the site is being used for malicious purposes. VirusTotal scans have flagged the domain in five of ninety‑one engines, reinforcing the suspicion of abuse. HTTP requests return a 200 status code, suggesting that the site is actively serving content. No public analysis of the page content, landing page, or targeted brand has been released, so the precise phishing vector and any credential‑harvesting mechanisms remain unknown. Defenders should add the domain and its resolved IP address to network deny lists, enforce DNS filtering policies that reference the identified blocklists, and monitor for any outbound connections to the Cloudflare edge IP. Continuous re‑scanning with multi‑engine services is advised to capture any changes in the payload or hosting configuration. The evidence indicates a high‑risk phishing infrastructure that is still operational as of the report date.