coinovix[.]com

This domain, coinovix.com, is classified with an elevated risk level and is specifically identified as a credential theft phishing site targeting cryptocurrency investors. The website posed as an advanced trading app, aiming to deceive users into divulging sensitive information such as login credentials and private keys.

Analysis indicates that the domain has been flagged by 2 out of 95 security vendors on VirusTotal, suggesting that while the threat is recognized, it has not yet been widely detected. The domain was registered through Spaceship, Inc., and resolves to the IP address 209.74.68.12. It was created on April 28, 2026, which is a relatively recent date, potentially indicating a new campaign. The domain appears on three security blocklists and has low trust scores of 35/100 from Gridinsoft and 31/100 from Scamadviser. The website utilized technologies such as PHP, Bootstrap, LiteSpeed, jsDelivr, and jQuery, which are common in legitimate web applications but can also be used to create convincing phishing sites.

To mitigate the risk of credential theft, users are advised to verify the legitimacy of the website through official channels before providing any sensitive information. Utilizing multi-factor authentication (MFA) and regularly updating passwords can help protect against unauthorized access. Additionally, users should remain vigilant for suspicious activities and report any phishing attempts to their security providers or through official reporting mechanisms.