coinku[.]io

The domain coinku.io was registered on June 29, 2025 through GoDaddy.com, LLC. DNS resolution points to 104.21.20.86, an IP address owned by Cloudflare (AS13335) and geolocated in the United States. Authoritative name servers are david.ns.cloudflare.com and susan.ns.cloudflare.com. HTTP requests return a 521 “Web server is down” status and the page title is “coinku.io | 521: Web server is down”. VirusTotal records indicate two of 91 scanners flag the domain. The domain appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Google Trust Services / WE1. Intelligence categorizes the activity as a crypto drainer, a variant of generic phishing that seeks to steal cryptocurrency assets. Gridinsoft assigns a trust score of 0/100. No additional page content has been captured; the current response provides no visible malicious payload, leaving the precise lure uncertain. Analysts should continue monitoring the domain for changes in HTTP response, new infrastructure, or victim reports. Defensive measures include adding coinku.io to URL filtering, blocking the IP 104.21.20.86, and applying TLS inspection where feasible. Given the high‑risk rating and active status, any communication originating from coinku.io should be treated as malicious, especially for organizations handling cryptocurrency transactions.