mass.report
Scan Intelligence Report0/100
high Risk
coinspot.desk-sync-hub.com
https://coinspot.desk-sync-hub.com/nyv9t?utm_campaign=VG_924935360219290_1702_LAND213.1_1-1-2_1&fbid=1291391469625609&utm_content=17coinspot3en&cid=1_AU_701_2455_mw&bid=BID&subid=1hfvvh9.282.osch
IP
104.21.31.108 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
0 days ⚠
HTTP
200 · 16.9s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
CoinSpot
Vendors
25/26
Status
partial
✓ emsisoft✓ sophos✓ cisa✓ openphish✓ spamhaus✓ apple✓ netcraft✓ urlscan✓ virustotal✓ mcafee✓ eset✓ norton✓ urlabuse✓ avast✓ google✓ avg✓ fortiguard✓ brightcloud✓ urlquery✓ apwg✓ phishreport✓ phishtank✓ microsoft✗ threatyeti✓ yandex✓ bitdefender
Registered-domain escalation
Submit desk-sync-hub.com as the primary IOC, enriched with evidence from hostile subdomains like coinspot.desk-sync-hub.com.
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
CoinSpot
Credential PhishingCryptocurrency · 4/5/2026
Summary
The site at coinspot.desk-sync-hub.com impersonates CoinSpot, a cryptocurrency exchange. It uses a deceptive URL and likely collects user credentials through dynamically rendered forms in a Single-Page Application (SPA). The domain is a newly registered typosquat, posing a high risk for phishing attacks.
Attack Techniques (3)
Typosquat domain (desk-sync-hub.com → coinspot.com)Single-Page Application (SPA) likely collecting credentials via JavaScriptNo static forms present, indicating potential dynamic credential capture
Indicators of Compromise (3)
▸DOMAIN: coinspot.desk-sync-hub.com
▸Network request to external script: https://static.cloudflareinsights.com/beacon.min.js
▸Newly registered domain (0 days old)
Risk AssessmentUsed in abuse reports
This domain, coinspot.desk-sync-hub.com, is a newly registered typosquat of the legitimate CoinSpot service. The absence of static forms and the presence of a JavaScript SPA suggest that it is designed to capture user credentials. The domain's creation date of 0 days and the SSL certificate issued today further indicate a high likelihood of phishing activity. Immediate action is required to mitigate potential user harm.
Recommended Action
Suspend Domain
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API