coinex[.]vu

This domain, coinex.vu, is flagged for brand impersonation, specifically targeting Google. The domain was registered through GoDaddy.com, LLC on August 09, 2025. Infrastructure analysis reveals that it resolves to the IP address 104.21.48.1, which is located in the United States and is part of Cloudflare, Inc.'s network (AS13335). The domain does not have an SSL certificate, which is a common characteristic of phishing sites aiming to reduce the cost and complexity of their operations.

Currently, the domain is offline and blocked by the security solution PhishDestroy. Analysis indicates that 9 of 95 security vendors on VirusTotal have flagged this domain, suggesting that it has been identified as potentially malicious by a subset of the security community. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trust and a high risk of being involved in malicious activities. The page title found during the analysis is 'CoinEx', which does not directly reference Google but may be part of the impersonation strategy.

Given the elevated risk level and the specific targeting of Google, defenders should remain vigilant and ensure that this domain is blocked at the network level to prevent any potential access by users. Any related email campaigns or URLs should be thoroughly investigated and reported to security teams. Since the domain is currently offline, ongoing monitoring is recommended to detect if it becomes active again in the future.