coinkrest[.]com

On 24 July 2026, coinkrest.com was identified as an offline domain used for an investment‑scam operation. The domain was registered on 21 February 2026 through NameCheap, Inc. and is hosted on the IP address 163.61.188.5, which belongs to AS153568 NEW DHAKA HARDWARE and resolves to a United States location. The site presented the page title “Coinkrest – Your No 1 Digital Investment Platform,” indicating an attempt to pose as a digital investment service. The SSL certificate is issued by Let’s Encrypt (R12), confirming that the site employed a free TLS certificate.

Infrastructure analysis shows four LyteHosting nameservers (dns1‑4.lytehosting.com) and a single MX record pointing to coinkrest.com, suggesting a minimal mail setup. Technology fingerprinting detected Bootstrap, LiteSpeed, OWL Carousel, Lightbox, jsDelivr, jQuery, Google Hosted Libraries, and HTTP/3, all typical of a generic web front‑end. Reputation data is poor: Gridinsoft assigned a trust score of 1 / 100, the domain appears on one security blocklist, and PhishDestroy has listed it as blocked. VirusTotal reported a single positive detection out of 95 scanning engines, reinforcing the malicious classification.

The site’s status is currently offline, limiting immediate interaction but indicating that the operators may reactivate it later. Uncertainties remain regarding the exact financial loss vector, the presence of any credential‑harvesting forms, and whether additional infrastructure (e.g., command‑and‑control servers) is associated with the IP address. Defenders should continue to monitor the domain and its IP for any re‑appearance, enforce blocklisting in network and email gateways, and update threat‑intel feeds with the observed indicators. Incident response teams should treat any communications referencing “Coinkrest” or the associated IP as suspicious and advise users to avoid providing personal or financial information to the site.