coingct[.]org

This domain, coingct.org, was registered on July 18, 2025, and remains active as of July 12, 2026. Analysis indicates it is a high-risk phishing site, currently resolving to the IP address 161.248.14.185. The domain has been flagged by 3 out of 95 security vendors on VirusTotal and appears in 23 threat intelligence pulses on AlienVault OTX, suggesting persistent malicious activity. It is also present on two security blocklists and is actively blocked by at least two detection systems. The page title associated with the domain is 'coin,' which may indicate an attempt to impersonate a cryptocurrency-related service, though the exact content and targeting of the phishing scheme have not yet been fully analyzed. The site employs several technologies, including Vue.js, Nginx, and HTTP/3, which are commonly used in both legitimate and malicious infrastructures. The SSL certificate is issued by Sectigo Limited, a widely recognized certificate authority, which does not inherently confirm legitimacy but is often exploited to lend credibility to phishing domains. Infrastructure analysis reveals the domain was registered through Gname.com Pte. Ltd., a registrar frequently associated with newly created malicious domains. The Gridinsoft trust score of 14/100 and Scamadviser trust score of 1/100 further corroborate the domain's high-risk status. Defenders should treat this domain as actively hostile and prioritize blocking both the domain and its resolving IP address, 161.248.14.185, at the network perimeter. Additional monitoring of related infrastructure, such as domains registered through the same registrar or resolving to the same IP, may help identify further threats.