coinscanai[.]io

The domain coinscanai.io was registered on 2026-02-21 through GoDaddy.com, LLC and is currently resolved to IP 185.158.133.1, which belongs to Cloudflare (AS13335) and is geolocated in Poland. The site presents the page title "CoinScanAi - AI-Powered Coin Identification" and returns HTTP 200 over an HSTS‑enabled connection secured by a Google Trust Services / WE1 certificate. DNS is served by ns39.domaincontrol.com and ns40.domaincontrol.com. Threat intelligence classifies the site as a credential phishing operation; it is listed on a single security blocklist and has been blocked by PhishDestroy. Gridinsoft assigned a trust score of 0/100, and one of ninety‑five VirusTotal scanners flagged the domain. The risk rating is high and the status is active. While the page title suggests a cryptocurrency identification service, no additional content analysis is available, leaving the exact phishing vector (e.g., credential‑stealing login pages) unconfirmed. Defenders should add the domain to network and endpoint blocklists, monitor DNS queries for the associated IP and nameservers, and alert users about unsolicited communications referencing coin identification services. Continuous observation of any changes to the site’s content or infrastructure is recommended.