DomainMediumSignal 12/100
coinh.vip
Location
United StatesFirst Seen
Apr 16, 2025
Last Seen
Aug 31, 2025
Found in 3 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
12%
Signal Score
12 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
3 reports12% confidence
3
Source reports
12%
Confidence score
Category tags
bitcoinblockchainbotnetcommand and controlcommodity contracts intermediationcredential harvestingcrypto exchangecrypto miningcrypto walletcryptocurrencycryptocurrency phishing attackcryptocurrency phishing campaigncryptocurrency theftcryptocurrency threatscryptojackingdata exfiltrationdecentralized financedefidigital currencydistributed attacksfinanceindicatormalicious redirectionmalicious softwaremalicious websitemalwarenetworknftnft phishingnorth americaphishing attackprivate key compromiseprocess injectionransomwareresearchedresource hijackingsocial engineeringt1055t1071.001t1078t1078.001t1078.004t1189t1192t1204.001t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1588.002united stateswebsite phishing
Activity Timeline
Aug 31Aug 31
Threat Activity Heatmap
· Peak: 2025-08-31LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated
The domain **coinh.vip** has emerged as a significant indicator of compromise (IOC) associated with multiple cyber threats, including botnets, malware, and ransomware. First observed on April
Threat ScoreLow Risk
12
SIGNAL
Signal Score
12%
Confidence
3
Reports
First seenApr 16, 2025
Last seenAug 31, 2025
VirusTotal
Not checked
WHOIS
- domain rank
- -1
- raw
- Administrative city: REDACTED FOR PRIVACY Administrative country: REDACTED FOR PRIVACY Administrative state: REDACTED FOR PRIVACY Create date: 2025-02-17 00:00:00 Domain name: coinh.vip Domain registrar id: 472 Domain registrar url: https://www.dynadot.com/ Expiry date: 2026-02-17 00:00:00 Name server 1: ns1.dyna-ns.net Name server 2: ns2.dyna-ns.net Query time: 2025-02-18 12:17:06 Registrant city: 1f8f4166599d23ee Registrant company: 473daf17453d83cd Registrant country: United States Registrant email: 29e2c061f3c9524es@ Registrant fax: 31d1617d95c9a75c Registrant name: 1f8f4166599d23ee Registrant phone: 31d1617d95c9a75c Registrant state: 77ab92f1911d7c5f Registrant zip: 1f8f4166599d23ee Technical city: REDACTED FOR PRIVACY Technical country: REDACTED FOR PRIVACY Technical state: REDACTED FOR PRIVACY Update date: 2025-02-17 00:00:00
- subdomains count
- 1
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 9 months ago
Appeared in 3 threat reports