coinrion[.]com

The domain coinrion.com has been assessed as having an elevated risk level due to its specific threat type of brand impersonation, particularly targeting the Ethereum cryptocurrency. This domain poses a significant threat as it purports to be a legitimate cryptocurrency exchange, potentially leading users to unwittingly provide sensitive information or financial details to malicious actors.

Infrastructure analysis reveals that the domain coinrion.com resolves to the IP address 104.21.8.117 and was created on May 03, 2025. It is registered through GMO Internet Group, Inc. d/b/a Onamae.com. The site utilizes Nginx and OpenResty technologies, which are common in web server setups. Notably, 9 out of 95 security vendors on VirusTotal flag this domain as potentially malicious, indicating a moderate level of detection. The domain's Gridinsoft trust score is 0/100, and its Scamadviser trust score is 1/100, both of which are extremely low and suggest significant risks. Additionally, coinrion.com appears on one security blocklist and has been taken offline, likely due to its malicious activities.

To mitigate the risks associated with brand impersonation, users should exercise extreme caution when encountering links or communications related to coinrion.com. It is recommended to verify the legitimacy of any cryptocurrency exchange by cross-referencing official domain names and URLs. Users should also avoid clicking on suspicious links or entering personal or financial information on untrusted websites. Network administrators and security teams should consider blocking the IP address 104.21.8.117 and adding coinrion.com to their threat intelligence databases to prevent any accidental access to this domain.