coinprobot[.]com

On July 23, 2026, the domain coinprobot.com was identified as a brand impersonation threat targeting the brand ton. The domain was registered through Gname.com Pte. Ltd. on September 11, 2025. Infrastructure analysis reveals that the domain resolves to the IP address 206.82.7.44, which is located in the United States and is part of the network AS963 N963 PTE. LTD.

The site does not have an SSL certificate, which is a common indicator of a lack of security and potential phishing activity. Analysis indicates that the domain has been flagged by 9 out of 95 security vendors on VirusTotal, suggesting some level of suspicion among the cybersecurity community. Google Safe Browsing also flags the domain for social engineering, further corroborating the elevated risk level. The domain's status is currently offline, and it is blocked by PhishDestroy, a known security service.

ScamAdviser provides a trust score of 6 out of 100, indicating a very low level of trust. The domain appears in one threat intelligence pulse on AlienVault OTX, adding to the evidence of its malicious nature. Given the current offline status, defenders should monitor for any reactivation and ensure that network and endpoint protections are configured to block access to this domain. Additionally, users should be educated to avoid interacting with unsolicited links or communications that may lead to this or similar domains, as they pose a significant risk of social engineering attacks.