coinw-login[.]at

PhishDestroy identifies coinw-login.at as a credential theft domain, impersonating the legitimate CoinW brand, with no known drainer kit involvement. This domain resolves to the IP address 186.2.175.29, was created on February 21, 2026, and has a VirusTotal score of 4/95, indicating a potential threat, it is also listed on 1 security blocklist and has been issued a Let's Encrypt SSL certificate, specifically the R12 version.

The domain coinw-login.at has been flagged by 1 security blocklist and has a current status of offline, despite this, the risk level remains elevated due to its ability to potentially trick users into revealing sensitive information, with the registrar and exact creation date of February 21, 2026, being crucial technical indicators, alongside the IP address and GSB status.

The current status of coinw-login.at is offline, however, users are still advised to exercise caution when encountering similar domains, as the threat of credential theft remains, and response actions should include avoiding any interaction with the domain, and reporting any suspicious activity, to mitigate the remaining risk and protect sensitive information, thereby ensuring a safer online experience.