coinexk[.]com

This domain, coinexk.com, is identified as a generic phishing site targeting cryptocurrency users. Analysis indicates no direct association with a specific drainer kit or brand impersonation, but the domain structure and naming convention suggest an attempt to mimic legitimate crypto exchange platforms. The lack of explicit branding in available intelligence implies a broader phishing campaign rather than a targeted brand spoof, likely designed to harvest login credentials or distribute malicious payloads under the guise of a crypto service. Infrastructure analysis reveals the following technical indicators: the domain was created on April 06, 2026, and is registered through Name SRS AB. It resolves to the IP address 104.21.52.108, a Cloudflare-associated endpoint that may obscure further infrastructure details. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on 3 security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL. No Google Safe Browsing (GSB) hits are recorded at this time, though this may reflect delayed reporting rather than absence of risk. The domain is currently offline, reducing immediate exposure to end users. However, the infrastructure remains registered and could be reactivated or repurposed for future campaigns. The elevated risk level stems from the domain's recent creation, low detection rate among security vendors, and association with known phishing blocklists. Users who interacted with this domain should assume credential exposure, revoke active sessions, and monitor for unauthorized transactions. Network-level blocking of the domain and its resolving IP is recommended for organizations to prevent potential reinfection or lateral movement.