coinretro[.]com

Analysis indicates that coinretro.com is currently offline but was previously reachable at IP 191.101.104.225, hosted by Hostinger International Limited (AS47583) in the United States. The domain was registered on August 21, 2025 through HOSTINGER operations, UAB, and uses the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. The only visible page title returned is “CoinRetro”, and the site does not present an SSL certificate, meaning all traffic would have been unencrypted. Infrastructure checks show a Gridinsoft trust score of 0 out of 100, indicating a highly malicious reputation. The domain appears on a single security blocklist and is explicitly listed by PhishDestroy as a phishing resource.

VirusTotal scanning recorded a single positive detection out of 95 security vendors, confirming at least one vendor identified malicious behavior. No additional safe‑browsing or OTX entries are present in the supplied data. The limited data leaves several aspects uncertain: the exact phishing payload, targeted brand, and whether the site ever served credential‑capture pages are not known because the site is offline and no page content has been captured. Absence of HTTPS and the use of parking nameservers suggest the domain may have been a short‑lived drop for malicious redirects.

Defenders should treat the domain as hostile. Recommended actions include adding coinretro.com to outbound and inbound web filters, blocking its hosting IP 191.101.104.225 at the network perimeter, and monitoring for any future DNS resolution to the same IP range. Because the registrar is Hostinger, organizations using Hostinger‑hosted services may wish to review account activity for unauthorized sub‑domains. Continuous re‑scanning of the domain is advised in case it becomes active again.