coinexco1[.]com

The domain coinexco1.com is a generic phishing site posing no direct impersonation of a known brand or drainer kit. It was designed to harvest user credentials or sensitive information through deceptive login prompts, classified as generic phishing with an elevated risk level. As of the latest verification, coinexco1.com has been taken offline, though prior activity may still pose residual risks to users who interacted with it.

Technical indicators confirm coinexco1.com was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. Google Safe Browsing did not flag the domain, but it appeared on 1 security blocklist (PhishDestroy). The domain was registered through InterNetX GmbH on April 16, 2025, and resolved to the IP address 104.21.16.1, hosted by Cloudflare, Inc. in the US (AS13335). The SSL certificate was issued by Cloudflare TLS Issuing ECC CA 1, and the observed page title was 'CoinEx'. Nameservers included b.share-dns.net and a.share-dns.com.

Users who visited coinexco1.com should immediately change any credentials entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized access or fraudulent transactions. If financial or crypto-related details were exposed, consider revoking token approvals and transferring funds to a new wallet. Report the domain to relevant platforms, including the registrar (InterNetX GmbH), hosting provider (Cloudflare), and anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group (APWG) to aid in mitigation efforts.