coires[.]net

The domain coires.net is identified as a high-risk threat, specifically a fake login phishing site. The domain mimics a legitimate stock trading platform, potentially impersonating a well-known brand to deceive users into providing sensitive information such as login credentials. This fraudulent activity is designed to capture user data and can lead to financial loss or identity theft.

Infrastructure analysis reveals that coires.net has been flagged by 4 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus among security providers regarding its malicious nature. The domain is registered through Gname.com Pte. Ltd., a registrar known for occasional association with suspicious domains. The domain resolves to the IP address 188.114.97.3, and it appears on one known security blocklist. The SSL certificate is issued by Let's Encrypt, which, while legitimate, does not guarantee the safety of the site and is often used by malicious actors to gain user trust.

Currently, coires.net remains active and poses a significant risk to users who may visit the site. It is recommended that users avoid interacting with this domain and report any related phishing attempts to their security team or service provider. Despite the domain being blocked by PhishDestroy, the remaining risk is high, and continuous monitoring is advised to ensure that the threat is fully mitigated.