cobaltefinanceun[.]com

cobaltefinanceun.com is an active phishing domain, with only 1 out of 91 VirusTotal vendors flagging it as malicious. This low detection rate highlights the domain's recent emergence as a threat. PhishDestroy first identified this domain on June 22, 2026, indicating its potential to exploit the early stages of phishing campaigns.

The domain is registered with Global Domain Group LLC and is hosted on IP 51.38.146.206, located in Poland under the organization OVH SAS. The SSL certificate is issued by Let's Encrypt, a common choice for phishing sites due to its free and automated nature. The domain's creation date is December 11, 2025, suggesting it may have been dormant for some time before activation.

cobaltefinanceun.com is currently listed on one public blocklist, specifically PhishDestroy's, further emphasizing its recent identification as a threat. The domain's use of Let's Encrypt SSL certificates and hosting by a reputable provider like OVH SAS can lend it an air of legitimacy, potentially deceiving unsuspecting users.

The low detection rate on VirusTotal underscores the importance of early detection systems like PhishDestroy's, which capture threats in the critical window before widespread antivirus database updates. This domain's activity serves as a reminder of the rapidly evolving nature of phishing threats and the need for continuous monitoring and proactive threat intelligence.