007xueche[.]cn

This domain, 007xueche.cn, has been identified as a brand impersonation threat specifically targeting CoinGecko, a well-known cryptocurrency data aggregator. The domain is currently offline, but prior analysis confirms its malicious intent to deceive users into believing they are accessing legitimate CoinGecko services. The page title, "币 安交易所下载注册-数字交易创新平台，带来最好的交易体验 - 币 安下载," directly mimics terminology associated with cryptocurrency exchanges, further reinforcing its fraudulent nature. Analysis indicates that 007xueche.cn was created on February 21, 2026, and was flagged by 14 out of 95 security vendors on VirusTotal. The domain appears on one security blocklist and was previously resolved to the IP address 156.226.74.203, located in Hong Kong under AS135097 (LUOGELANG (FRANCE) LIMITED). The SSL certificate associated with the domain is classified as R11, a designation often linked to low-trust or suspicious infrastructure. Additional intelligence confirms that the domain was blocked by at least one security entity prior to being taken offline. The current offline status of 007xueche.cn reduces immediate risk, but the infrastructure and historical activity warrant continued monitoring. Organizations and individuals are advised to block the domain and its associated IP (156.226.74.203) at the network level to prevent potential re-emergence. Users should verify the authenticity of cryptocurrency-related websites by cross-referencing official domains and enabling multi-factor authentication on all accounts. Security teams are encouraged to review logs for connections to the domain or IP and investigate any related activity for signs of compromise.