mass.report
Scan Intelligence Report0/100
critical Risk
coinspot.app-loader-suite.com
https://coinspot.app-loader-suite.com/ekvx5?utm_campaign=HG_1376857750349521_1302_Land213.1_sales_1-3-1%D1%81bo&fbid=1286456742640539&utm_content=17coinspot3en&cid=1_purch_101_AU_m_25-60_noint&bid=BID&subid=1hfvvh9.233.oosd
IP
104.21.75.19 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
—
HTTP
200 · 23.2s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
Domain Intelligence: app-loader-suite.com
Scanned 3 times since Feb 17, 2026, 09:38 AM UTC
✗ Critical (100)
Registered-domain escalation suggested
Suggested nowSubmit app-loader-suite.com as the primary IOC, enriched with evidence from hostile subdomains like coinspot.app-loader-suite.com.
2 hostile subdomains across 3 completed scans were observed under this registered domain. Recent hosts: svyftx.app-loader-suite.com, coinspot.app-loader-suite.com.
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
FinWise
Data HarvestingFinance & Banking · 4/5/2026
Summary
The site at coinspot.app-loader-suite.com impersonates the legitimate FinWise brand, using the title 'FinWise - Financial Education Resources'. The domain does not match the official FinWise website, indicating a phishing attempt to harvest user data under the guise of financial education resources.
Attack Techniques (4)
Domain impersonation (coinspot.app-loader-suite.com vs. finwise.com)Cloned UI elements mimicking FinWise's brandingUse of external scripts for tracking (Google Analytics, Facebook Pixel)GET request to a URL that includes campaign tracking parameters, indicating potential data harvesting
Indicators of Compromise (4)
▸Domain: coinspot.app-loader-suite.com
▸GET request to: https://coinspot.app-loader-suite.com/ekvx5
▸External script: https://www.google-analytics.com/analytics.js
▸Open Graph URL pointing to legitimate FinWise site: https://finwise.com/
Risk AssessmentUsed in abuse reports
The domain coinspot.app-loader-suite.com is a clear impersonation of the legitimate FinWise brand, as evidenced by the page title and content. The use of tracking scripts from Google Analytics and Facebook indicates an intent to harvest user data. Furthermore, the domain does not match the official FinWise website, which is finwise.com, further solidifying this as a phishing attempt. Immediate action is required to suspend this domain to prevent potential data theft.
Recommended Action
Suspend Domain
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API