coinomi-support[.]com

Analysis of coinomi-support.com indicates a brand impersonation campaign targeting WordPress users, classified as a tech support scam. The domain was registered on October 14, 2025, through HOSTINGER operations, UAB, and resolves to IP address 84.32.84.32, hosted on AS47583 (Hostinger International Limited) in Lithuania. Infrastructure analysis reveals the use of Hostinger CDN, Google Analytics, and HTTP/3 protocols. The domain's nameservers are ns1.dns-parking.com and ns2.dns-parking.com, and it presents a Let's Encrypt SSL certificate (R12). At the time of assessment, the page title displayed 'Parked Domain name on Hostinger DNS system,' though this may not reflect the intended malicious content, as the domain is currently offline.

Detection data shows limited but clear indicators of compromise: six of 95 security vendors on VirusTotal flagged the domain, and it appears on one security blocklist, with PhishDestroy explicitly blocking it. Gridinsoft assigned a trust score of 0/100. The HTTP status code returned was 200, suggesting the server was operational prior to takedown. No evidence of Safe Browsing or Open Threat Exchange (OTX) listings is present in the available data.

The scam type is explicitly categorized as a tech support scam, though the exact mechanics—such as whether it employs fake support portals, phone numbers, or remote access tools—remain unconfirmed due to the domain's offline status. Defenders should treat this domain as malicious, particularly in environments where WordPress-related support inquiries are common. Network-level blocking of 84.32.84.32 and monitoring for connections to the nameservers ns1.dns-parking.com and ns2.dns-parking.com is recommended. Given the domain's recent creation and low detection rate, further scrutiny of related infrastructure under Hostinger or DNS-parking.com may uncover additional threats.