leeacoins[.]com

This domain, leeacoins.com, was observed hosting a phishing page titled “Bot Verification”. The site was registered on 28 August 2025 through HOSTINGER operations, UAB and is hosted on a Hostinger International Limited network (AS47583) with the IP address 84.32.84.38 located in Lithuania. The domain resolves to the IP via the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com, and it does not present an SSL certificate. Gridinsoft assigned a trust score of 0 out of 100, indicating a lack of reputation. The page has been flagged by PhishDestroy and appears on one external blocklist.

VirusTotal reports a single detection out of 95 scanners, confirming that at least one security vendor identified malicious behavior. The site is currently taken offline, which limits further payload inspection. Defenders should block the domain and the associated IP address at perimeter and DNS filtering layers. Monitoring of the hosting provider’s IP range (AS47583) for additional malicious domains is recommended, as the provider has been used for other phishing infrastructure.

Because the site lacks TLS, traffic interception is not required for SSL stripping, but the absence of encryption simplifies content inspection if the domain becomes active again. Continuous review of the registrar’s newly created domains is advised, given the recent creation date. Indicators of compromise (IOCs) to ingest include the domain name, the IP 84.32.84.38, and the two parking nameservers. Organizations should also ensure that any user‑reported attempts to access leeacoins.com are treated as phishing attempts and that credential‑sharing warnings are reinforced.