coinexexchange[.]cc

PhishDestroy identifies coinexexchange.cc as a high-risk generic phishing domain, specifically designed to impersonate the CoinEx cryptocurrency exchange to steal login credentials and assets. The domain was flagged with a high risk level due to its deceptive nature and multiple security alerts, indicating an active threat to users who may be lured to the fake site.

Analysis reveals critical technical indicators: VirusTotal shows 13 out of 95 security vendors flagging the domain as malicious. The domain was registered on December 25, 2025, through Gname.com Pte. Ltd., and resolves to IP address 188.114.97.3. It appears on 4 security blocklists and is marked as phishing by Google Safe Browsing. AlienVault OTX includes it in 1 threat intelligence pulse. The SSL certificate is issued by Google Trust Services (WE1), providing a false sense of security. The page title is "CoinEx," and the domain is currently offline but was active during the threat window.

Users who may have visited coinexexchange.cc should immediately change their CoinEx account passwords and enable two-factor authentication. Avoid entering any credentials on suspicious pages, and monitor accounts for unauthorized transactions. Report the domain to security teams and block it at the network level. PhishDestroy recommends using bookmark URLs for exchanges and verifying SSL certificates carefully, as phishing sites often use legitimate certificates. Stay vigilant against lookalike domains and unsolicited links.