coiinholdb[.]com[.]interactivetrd[.]com

Analysis of coiinholdb.com.interactivetrd.com indicates a confirmed phishing infrastructure that has been taken offline as of the reporting date, July 24, 2026. The domain was registered on February 21, 2026 through GMO Internet Group, Inc. d/b/a Onamae.com, and its authoritative name servers are listed as ns1.verification-hold.suspended-domain.com and ns2.verification-hold.suspended-domain.com. The page title returned by the site matches the fully qualified domain name, offering no additional context about the intended target or payload. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of abuse.

The domain appears on a single security blocklist and has been specifically blocked by PhishDestroy, confirming its classification as a phishing vector. VirusTotal scans show that two of ninety‑three antivirus engines flagged the domain, providing independent corroboration of malicious activity. The low trust score, blocklist presence, and multi‑vendor detections collectively suggest a deliberately crafted phishing campaign, likely designed to impersonate a legitimate service to harvest credentials. Definitive details about the landing page content, hosting IP address, SSL certificate, or targeted brand are not available from the current intelligence set, leaving those aspects uncertain.

Defenders should continue to monitor for any resurgence of the domain, enforce blocklist updates across perimeter defenses, and consider adding the domain to internal blacklists. Incident response teams encountering related phishing attempts should treat any communication originating from this domain as malicious and advise users to avoid interaction. Continued observation of the registrar's activity and any future re‑registration attempts is recommended to preempt potential re‑use of the same namespace.