IOC Radar
DomainMediumSignal 12/100

coinb.one

Location
United StatesUnited States
First Seen
Apr 16, 2025
Last Seen
Sep 4, 2025
Apr 16
First Seen
422d ago
Sep 4
Last Seen
282d ago
3
Reports
source reports
12%
Confidence
medium
1/91
VirusTotal
detections
Found in 3 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
12%
Signal Score
12 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

18 techniques

Feed Intelligence Summary

3 reports12% confidence
3
Source reports
12%
Confidence score
Category tags
bitcoinblockchainbotnetcommand and controlcommodity contracts intermediationcredential harvestingcrypto exchangecrypto miningcrypto walletcryptocurrencycryptocurrency phishing attackcryptocurrency phishing campaigncryptocurrency theftcryptocurrency threatscryptojackingdata exfiltrationdecentralized financedefidigital currencydistributed attacksfinanceindicatormalicious redirectionmalicious softwaremalicious websitemalwarenetworknftnft phishingnorth americaphishing attackprivate key compromiseprocess injectionransomwareresearchedresource hijackingsocial engineeringt1055t1071.001t1078t1078.001t1078.004t1189t1192t1204.001t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1588.002united stateswebsite phishing

Activity Timeline

1 total obs
Sep 4Sep 4

Threat Activity Heatmap

· Peak: 2025-09-04
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

This indicator, `coinb.one`, holds a score of 11.97, placing it in the low-risk category. While its inclusion in multiple threat intelligence feeds suggests potential for adverse use, the current assessment indicates a low probability of direct, high-severity impact on organizational systems. The primary concern is its association with 'crypto phish' activity, which points to low-level deceptive practices aimed at individuals. Organizations should, therefore, focus on routine monitoring and user…

Threat ScoreLow Risk
12
SIGNAL
Signal Score
12%
Confidence
3
Reports
First seenApr 16, 2025
Last seenSep 4, 2025

VirusTotal

1/ 91vendors flagged
1% detection rateJun 7, 2026

WHOIS

domain rank
-1
raw
Administrative city: REDACTED FOR PRIVACY Administrative country: REDACTED FOR PRIVACY Administrative state: REDACTED FOR PRIVACY Create date: 2025-02-17 00:00:00 Domain name: coinb.one Domain registrar id: 472 Domain registrar url: https://www.dynadot.com/ Expiry date: 2026-02-17 00:00:00 Name server 1: ns1.dyna-ns.net Name server 2: ns2.dyna-ns.net Query time: 2025-02-18 12:46:48 Registrant city: 1f8f4166599d23ee Registrant company: 473daf17453d83cd Registrant country: United States Registrant email: 29e2c061f3c9524es@ Registrant fax: 31d1617d95c9a75c Registrant name: 1f8f4166599d23ee Registrant phone: 31d1617d95c9a75c Registrant state: 77ab92f1911d7c5f Registrant zip: 1f8f4166599d23ee Technical city: REDACTED FOR PRIVACY Technical country: REDACTED FOR PRIVACY Technical state: REDACTED FOR PRIVACY Update date: 2025-02-17 00:00:00
subdomains count
0

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 9 months ago
Appeared in 3 threat reports