smartcoinsprotal[.]xyz

This domain is flagged as a high-risk credential phishing threat. It was registered on October 26, 2025, through OwnRegistrar, Inc., and remains active as of July 12, 2026. The domain resolves to IP address 188.114.97.3, located in the United States and hosted via AS13335 (Cloudflare, Inc.). The nameservers are braden.ns.cloudflare.com and opal.ns.cloudflare.com. An SSL certificate issued by Google Trust Services (WE1) is in use, and the site employs Cloudflare with HTTP/3 protocol. The page title observed is 'Nur einen Moment…', which is a common placeholder or redirect page, and the HTTP status code is 403 (Forbidden), indicating the server blocks direct access. VirusTotal reports 9 out of 95 security vendors flagging this domain, and it appears on 4 security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. The Gridinsoft trust score is 0/100. The exact content of the phishing page has not been visually recorded, but the classification as credential phishing is based on threat intelligence. Defenders should block the domain at the network level, add it to blocklists, and monitor for related subdomains or infrastructure. Users should avoid interaction with the domain or any links pointing to it.