luzia-coinex[.]ru

This domain, luzia-coinex.ru, operates as a brand impersonation site designed to deceive users into believing it is an official cryptocurrency platform. The site falsely presents itself as "Luzia Coinex" with a fabricated claim of being "UPDATED 2025," targeting individuals associated with the "across" brand. The primary threat involves luring victims into interacting with fraudulent crypto services, potentially leading to unauthorized asset transfers or exposure of sensitive wallet credentials. Users who engage with this site risk financial loss through crypto draining mechanisms or other forms of digital asset theft. Analysis indicates the domain is registered through BEGET-RU, a registrar frequently associated with malicious activity. It resolves to the IP address 91.236.116.238, hosted under AS42237 (w1n ltd) in Sweden, an infrastructure segment known for housing high-risk domains. Security vendors on VirusTotal flag this domain at a rate of 18 out of 95, reflecting a consensus on its malicious nature. Additionally, the domain appears on one security blocklist and lacks a valid SSL certificate, further confirming its suspicious status. The page title, "Luzia Coinex ™ | The Official Site 【UPDATED 2025】," is a deliberate attempt to mimic legitimacy and exploit trust in established brands. If you have visited luzia-coinex.ru or interacted with its content, immediate action is required. Disconnect any connected wallets or devices from the internet to prevent ongoing data exfiltration. Review all recent cryptocurrency transactions for unauthorized activity and revoke any suspicious wallet permissions using a trusted blockchain explorer. Change passwords for any accounts linked to the interaction, especially those tied to crypto services, and enable multi-factor authentication where available. Report the incident to relevant cybersecurity teams or platforms that track fraudulent domains to aid in broader mitigation efforts.