coinex[.]global

The domain coinex.global is currently flagged as a fake cryptocurrency exchange phishing site. Registration records show the domain was created through NICENIC INTERNATIONAL GROUP CO., LIMITED, and the TLS certificate is issued by Google Trust Services, indicating a legitimate certificate chain despite malicious intent. Network analysis reveals the site was served behind Cloudflare and leveraged HTTP/3, but the last observed HTTP response returned a 522 timeout, confirming the site is presently offline. Reputation services assign extremely low scores: Scamadviser rates the domain 1 out of 100, while Gridinsoft scores it 0 out of 100, reflecting a high likelihood of abuse.

The domain appears on four known security blocklists and is actively blocked by PhishDestroy, MetaMask, CryptoFirewall, and SEAL. VirusTotal analysis shows five of ninety‑one scanners flagged the domain, reinforcing its malicious classification. The page title captured during the last probe reads “coinex.global | 522: Connection timed out,” providing no further content for content‑based analysis.

At this time no additional infrastructure details such as IP address, hosting provider, or autonomous system number have been disclosed, limiting deeper attribution. Defenders should continue to block the domain at network perimeter and endpoint layers, monitor for any re‑appearance of the domain or associated IP ranges, and update threat intelligence feeds with the observed indicators. Users should be warned that any unsolicited communications referencing coinex.global are likely attempts to harvest credentials for a counterfeit exchange platform.