coin-counsel[.]com

coin-counsel.com is currently active and presents a brand‑impersonation campaign targeting YouTube users. The site was registered on 26 December 2023 through Squarespace Domains LLC and resolves to the IP address 198.185.159.145, which belongs to AS53831 (Squarespace, Inc.) in the United States. HTTP requests return a 301 redirect and the site serves a valid TLS certificate issued by Let’s Encrypt (R12). The page title returned by the server is “Coin Counsel – Cryptocurrency Law Firm”, indicating the domain is hosted on Squarespace Commerce and uses Squarespace, Stimulus, HSTS, and Google Tag Manager. VirusTotal scans have flagged the domain by three of ninety‑five security vendors, and Gridinsoft assigns a trust score of 0 / 100. The domain appears on one public blocklist and is already blocked by the PhishDestroy service. The infrastructure suggests a low‑cost, quickly provisioned site rather than a sophisticated operation; however, the high risk rating reflects the use of a reputable brand (YouTube) to lure victims. At present, no detailed page content has been examined, so the exact phishing vectors, credential‑capture mechanisms, or malicious payloads remain unknown. Defenders should add 198.185.159.145 and coin‑counsel.com to network‑level blocking lists, monitor DNS queries for the domain, and consider surfacing alerts for any traffic that presents the YouTube brand in conjunction with this domain. Continuous re‑scanning with multi‑engine services is recommended to capture any changes in detection status.