coinsbit[.]exchange

The domain coinsbit.exchange was registered on January 03, 2026 through Porkbun LLC. Its authoritative name servers are ns1.exchange-mail.me and ns2.exchange-mail.me, and the domain resolves to the IPv4 address 109.123.240.143. Current intelligence classifies the site as a generic phishing operation with a high risk rating and indicates that the infrastructure remains active as of the report date, July 27, 2026. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service.

VirusTotal analysis shows that one out of ninety‑one scanning engines flagged the domain, confirming the presence of malicious activity. No additional public threat intelligence sources such as OTX, Safe Browsing, or other reputation services have reported on the domain, and no SSL certificate details or HTTP response codes have been disclosed. Consequently, the extent of the payload, the exact phishing template, and any associated command‑and‑control endpoints remain unknown.

Defenders should add coinsbit.exchange to internal blocklists, enforce DNS sink‑hole or proxy filtering, and monitor outbound traffic for connections to 109.123.240.143. Because the registrar is Porkbun LLC, investigators may consider requesting registration records to identify the registrant. Continuous re‑evaluation is advised, especially if additional scanners raise the detection count or if the domain appears on further blocklists.