coinstrike[.]net

Analysis of coinstrike.net indicates an active, high‑risk brand‑impersonation campaign targeting the Across brand. The domain was registered on 27 August 2025 through Spaceship, Inc., and is hosted behind Cloudflare (AS13335) with the IP address 188.114.96.3 located in the United States. DNS configuration uses Cloudflare nameservers (jobs.ns.cloudflare.com, raegan.ns.cloudflare.com) and partial MX records show route3.mx.cloudflare.net (priority 22) with an additional record lacking a host value. The site serves content over HTTPS using a Google Trust Services / WE1 certificate and returns HTTP 200 for the landing page titled "Coin Strike: Hold and Win Slot (Playson) - Demo & Review". Gridinsoft assigns a trust score of 0/100, and the domain appears on one security blocklist; one of ninety‑five VirusTotal scanners flagged the domain. PhishDestroy has also listed the domain as blocked. The listed scam type is a crypto scam, though specific malicious payloads or credential‑harvesting mechanisms have not been publicly disclosed. Defenders should proactively block coinstrike.net at perimeter firewalls and proxy filters, monitor outbound connections to its Cloudflare IP, and consider adding the domain to internal deny‑list feeds. Continuous re‑evaluation is advised as further evidence, such as detailed page content or additional malware detections, may emerge.