coinsbureaufx[.]com

The domain coinsbureaufx.com is a phishing site engaged in brand impersonation, specifically targeting users of x.com. It operates as a social media phishing scam designed to deceive victims into divulging login credentials or other sensitive information. No crypto drainer kit was identified in this campaign. The site is currently taken offline, but prior activity indicates an elevated risk level for those who may have interacted with it.

Technical indicators confirm the malicious nature of coinsbureaufx.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and alphaMountain.ai. It appears on 3 security blocklists: PhishDestroy, ScamSniffer, and Enkrypt. Registered through Dynadot LLC on February 04, 2025, the domain resolves to the IP address 199.59.243.228, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The SSL certificate is issued by Let's Encrypt (R13), and the observed page title matches the domain name. Technologies detected include Nginx. Gridinsoft assigned a trust score of 0/100, while Scamadviser rated it 30/100.

Individuals who visited coinsbureaufx.com should immediately change their x.com passwords and enable two-factor authentication if they entered credentials. Monitor accounts for unauthorized activity and report any fraudulent transactions. The domain can be reported to x.com's security team and to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. If financial or personal data was compromised, consider contacting local cybercrime authorities for further assistance.