dex-coinnexfx[.]com

Analysis of dex-coinnexfx.com indicates an active phishing domain targeting cryptocurrency users, registered on March 24, 2026, through TuringSign Inc. d/b/a Cosmotown. As of July 27, 2026, the domain resolves to IP address 86.107.77.57 and uses nameservers ns1.stablewebtech.com and ns2.stablewebtech.com. Infrastructure review shows the domain appears on one security blocklist and is currently blocked by PhishDestroy, though it remains unflagged by the 91 vendors that scanned it on VirusTotal.

The absence of detections in these scans does not confirm safety, as phishing domains often evade initial detection through rapid rotation or obfuscation techniques. The domain’s registration details and hosting provider align with patterns observed in other cryptocurrency-themed phishing campaigns, though the exact content and target brand remain unconfirmed due to limited page analysis. Defenders should treat this domain as an active threat, particularly in environments where cryptocurrency transactions or credentials are handled.

Monitoring for connections to 86.107.77.57 or the associated nameservers may help identify compromised systems or ongoing phishing attempts. Organizations are advised to update blocklists proactively and investigate any user reports of interaction with this domain.