spiritedcoin[.]io

spiritedcoin.io is a generic phishing domain, specifically a wallet connect phishing scam, that has been taken offline. It poses a threat by attempting to trick users into connecting their cryptocurrency wallets, potentially leading to asset theft. The domain does not impersonate any known brand and was not associated with a specific drainer kit at the time of analysis.

Technical indicators for spiritedcoin.io include detection by 3 of 95 VirusTotal vendors, including alphaMountain.ai, Gridinsoft, and SOCRadar. The domain was registered through Dynadot LLC on August 07, 2025, and resolves to IP address 64.190.113.217, located in the US under AS399629 BL Networks. It appears on 2 security blocklists (PhishDestroy and ScamSniffer) and is flagged in 1 AlienVault OTX threat intelligence pulse. The page title observed was 'Kasumi demo page', and the Gridinsoft trust score is 0/100. No SSL certificate was present.

Users who interacted with spiritedcoin.io should immediately revoke any token approvals granted to the domain and move funds to a new, secure wallet. Change passwords for any accounts that may have been compromised, enable two-factor authentication, and monitor for unauthorized transactions. Report the phishing domain to relevant authorities and blocklists to help prevent further victimization.