coinsageai-it[.]com

The domain www.coinsageai-it.com has been identified as a cryptocurrency phishing site targeting users through brand impersonation. Analysis indicates the domain is designed to mimic legitimate cryptocurrency platforms, potentially deceiving users into disclosing sensitive credentials or transferring digital assets. As of the latest assessment, the domain is currently offline, though prior activity aligns with known phishing tactics in the financial technology sector. Infrastructure analysis reveals the domain was registered through Gname.com Pte. Ltd. on February 21, 2026, and resolves to the IP address 104.21.24.222. Security vendor detections include flags from 2 of 95 vendors on VirusTotal, while Gridinsoft assigns a trust score of 0 out of 100. The domain appears on one security blocklist and is associated with Cloudflare infrastructure, which is frequently leveraged to obfuscate malicious origins. The SSL certificate is issued by Google Trust Services, a common tactic to lend superficial legitimacy to phishing sites. The page title, CoinSageAI, further suggests an attempt to impersonate a cryptocurrency service provider. Current status confirms the domain has been taken offline, though residual risk remains due to its recent registration and prior malicious activity. Organizations and individuals are advised to block traffic to 104.21.24.222 and monitor for related domains registered through the same registrar. Users should verify cryptocurrency platforms through official channels and avoid interacting with unsolicited links or communications referencing CoinSageAI or similar variants. Security teams are recommended to update detection rules to include this domain and its associated indicators of compromise.