coinstonelimited[.]com

This domain, coinstonelimited.com, is actively flagged as a high-risk brand impersonation threat targeting the Across platform. Analysis indicates the domain was registered on December 9, 2024, through Web Commerce Communications Limited, a registrar frequently associated with fraudulent domains. Infrastructure analysis reveals the domain resolves to the IP address 198.12.66.123, which has been linked to multiple phishing campaigns in recent threat intelligence reports. As of July 12, 2026, the domain appears on two security blocklists and is detected in 24 threat intelligence pulses on AlienVault OTX, suggesting widespread recognition of its malicious activity. The domain is currently blocked by at least two security vendors, including PhishDestroy and BLP-Malware, and is flagged by 13 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its free and automated issuance process. The page title, coinstonelimited.com, does not provide additional context about the specific content or tactics employed, but the domain's classification as a brand impersonation threat confirms its intent to deceive users by mimicking the Across platform. While the exact methods of exploitation remain unclear without further analysis of the site's content, the domain's infrastructure and detection history strongly suggest it is part of an active phishing campaign. Defenders should treat this domain as malicious and prioritize blocking it at the network level, particularly for organizations or users associated with the Across platform. Monitoring for related domains registered through the same registrar or resolving to the same IP address may help identify additional threats in this campaign. Given the domain's low trust scores from Gridinsoft and Scamadviser, both assigning a score of 1 or 0 out of 100, no level of user interaction with this domain should be considered safe.