coinzick[.]com

The domain coinzick.com was registered on March 06, 2026 through Realtime Register B.V. It resolves to the IPv4 address 185.151.30.154, which is assigned to AS48254 (20i Limited) in Great Britain. The site presents a valid HTTPS certificate issued by Let’s Encrypt (R13) and resolves via four LyteHosting nameservers (dns1‑dns4.lytehosting.com). Automated analysis assigns a Gridinsoft trust score of 0 out of 100, indicating a complete lack of credibility. VirusTotal reports that one of ninety‑five security scanners flagged the domain, and the site appears on a single public blocklist. The HTTP response returns status 200 and the page title is “Coinzick”, matching the domain name and suggesting a brand‑spoofing front‑end. Current evidence points to a generic phishing operation, although the exact credential‑harvesting payload has not been captured in the available data. The presence on PhishDestroy’s blocklist confirms that the infrastructure is actively used for malicious credential collection. No additional payload hashes, email templates, or victim reports have been disclosed, leaving the specific target profile uncertain. Defenders should immediately block coinzick.com at the DNS and proxy layers, and monitor outbound connections to 185.151.30.154 for suspicious activity. Continuous re‑scanning of the domain is advised, as the low trust score and existing detections suggest the site may evolve or host additional malicious resources. Organizations using brand‑related credentials should alert users to the ongoing threat.