coinxexxstension[.]webflow[.]io

This report analyzes the domain coinxexxstension.webflow.io, which resolves to a 404 - Page not found error. The domain name suggests an attempt to impersonate a cryptocurrency-related service, likely "CoinEx" or a similar exchange, targeting users seeking wallet extensions or platform access. The primary threat is phishing or credential theft, as users may be misled into providing sensitive information under the guise of a legitimate crypto platform.

Technical analysis reveals the domain has been flagged by 4 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, Fortinet, and Webroot. It is listed on 1 blocklist. The domain was created on 2013-05-08 and is registered through MarkMonitor, Inc. It resolves to IP address 172.64.151.8, located in the United States, hosted by AS13335 (Cloudflare, Inc.). The SSL certificate is issued by Google Trust Services (WE1), and nameservers are journey.ns.cloudflare.com and lamar.ns.cloudflare.com.

The site is currently DOWN/OFFLINE, rendering it inaccessible. Despite the low detection rate, the domain’s structure and likely impersonation of a crypto brand indicate a moderate risk. The offline status reduces immediate threat, but the domain may be reactivated for malicious campaigns. Users should avoid interacting with it and block the domain in security policies.