coinock[.]org

This domain, coinock.org, was registered on July 15, 2025, through Dynadot LLC and was assessed as a high-risk phishing infrastructure targeting wallet and seed phrase credentials. The domain resolved to IP address 204.188.228.8, hosted in the United States on AS46844 (Sharktech). Analysis indicates the domain was created specifically for brand impersonation, with the page title 'coinock' and a broad brand target listed as 'across'. Security vendor detection was low, with only 3 out of 95 vendors on VirusTotal flagging the domain as malicious, and it appeared on 4 security blocklists.

Trust evaluation services gave very low scores: Scamadviser rated it 23 out of 100, and Gridinsoft rated it 1 out of 100. The domain lacked an SSL certificate, further indicating a lack of legitimate security measures. As of the report date of July 22, 2026, the domain was confirmed offline and had been blocked by multiple security platforms including PhishDestroy, Polkadot, Enkrypt, and Codeesura. The exact content of the website was not analyzed, so no details about visual design or specific brand mimicry are available.

Defenders should consider this domain a confirmed threat for wallet and seed phishing, and although it is currently offline, similar domains may appear under the same registrar or hosting provider. Monitoring for new registrations with similar naming patterns and blocking the associated IP range is recommended. The domain was taken offline before the report date, but the infrastructure remains a point of reference for future investigations into wallet phishing campaigns.