coincheck[.]com[.]co

This report analyzes the domain coincheck.com.co, which impersonates the legitimate Japanese cryptocurrency exchange Coincheck. The site's title claims to offer wallet integration for direct and immediate cryptocurrency transfers, a common lure for credential harvesting or wallet-draining scams. The threat posed is phishing and financial theft, as users are tricked into connecting their wallets to a fraudulent platform.

Technical evidence confirms the malicious nature of this domain. VirusTotal reports 3 out of 95 security vendors flagging it, with detections from Fortinet, Gridinsoft, and SOCRadar. The domain was registered on 2026-02-21 through Name.com, Inc., and resolves to IP 63.176.8.218 in Germany, hosted on AS16509 (Amazon.com, Inc.). It uses a Let's Encrypt SSL certificate (E8), a common choice for low-cost phishing operations, and its nameservers are on the nsone.net network. GridinSoft rates its trustworthiness at 0 out of 100.

Currently, the site is offline and inaccessible. Despite its inactive status, the domain remains a high-risk threat due to its impersonation of a major brand and recent creation date. Users should avoid any interaction with this domain or its associated IP address. The risk level is critical for anyone targeted by this phishing campaign.