coinfirmtrades[.]com

This domain, coinfirmtrades.com, operates as a fraudulent investment platform impersonating Ethereum to deceive users into transferring cryptocurrency under false promises of hourly profits. The site presents itself as a legitimate trading or staking service, leveraging Ethereum’s brand reputation to exploit victims through fabricated yield claims and urgency tactics. Such infrastructure typically harvests wallet credentials, private keys, or direct cryptocurrency deposits, leading to irreversible financial losses for unsuspecting users. Analysis indicates the domain was registered on April 16, 2025, through Sav.com, LLC, and resolves to the IP address 107.172.61.186, hosted on AS36352 (HostPapa) in the United States. The SSL certificate, issued by Let’s Encrypt (R12), provides minimal encryption but does not validate legitimacy. Security vendors on VirusTotal flagged the domain at a 10/95 detection rate, while PhishDestroy has explicitly blocked it. The domain appears on one security blocklist, and its page title, 'coinfirmtrades.co - Earn Stable Hourly Profits Online!', explicitly promotes deceptive financial incentives. Users who visited coinfirmtrades.com should immediately cease all interactions and revoke any connected wallet permissions. If cryptocurrency was transferred, report the transaction to the relevant blockchain explorer and local cybercrime authorities. Monitor financial accounts for unauthorized activity and consider resetting credentials for any services where identical login details were reused. Infrastructure analysis reveals this domain is now offline, but threat actors may re-deploy similar infrastructure under new domains. Exercise caution with unsolicited investment opportunities, particularly those promising guaranteed returns.