coinpoolmix[.]com

This domain, coinpoolmix.com, is identified as a generic phishing threat designed to impersonate a legitimate online retailer specializing in gaming-themed apparel. The site presents itself under the title 'Ultimate Gamer Hoodies - Fast Delivery Rome | All-Day Comfort,' suggesting a focus on hoodies and fast shipping, likely targeting consumers searching for gaming merchandise. Analysis indicates the domain was crafted to harvest payment card details, personal information, or login credentials under the guise of a retail transaction. The use of gaming-related branding increases the likelihood of successful deception among enthusiasts of gaming culture. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 89.19.213.39, which has been linked to multiple phishing campaigns in recent months. At the time of assessment, coinpoolmix.com appears on one security blocklist and is flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but growing detection. The discrepancy between the creation date (2026) and current detection timelines suggests potential inaccuracies in registration metadata or a preemptive domain setup for future abuse. Users who visited coinpoolmix.com or entered sensitive information on the site should take immediate remediation steps. All credentials, payment details, or personal data submitted should be considered compromised. Affected individuals are advised to monitor financial statements for unauthorized transactions and reset passwords for any accounts using the same credentials. Browser caches and saved form data should be cleared to prevent autofill-based re-exposure. Organizations should update internal blocklists to include the domain and its associated IP address, 89.19.213.39, to prevent future access attempts. If the domain was accessed in a corporate environment, endpoint detection and response systems should be reviewed for signs of lateral movement or data exfiltration.