comex-rejestracja[.]pl

This domain, comex-rejestracja.pl, is assessed as a confirmed fake exchange scam following infrastructure analysis and security vendor detections. Registered on March 24, 2026, through Hosting Concepts B.V., the domain was taken offline by the time of this report. It resolves to a Cloudflare IP (172.67.164.148) located in Canada, utilizing Cloudflare nameservers (burt.ns.cloudflare.com, indie.ns.cloudflare.com) and HTTP/3 technology. The SSL certificate is issued by Let's Encrypt (serial E7), a common choice for both legitimate and malicious infrastructure. At the time of assessment, the domain returned an HTTP 403 status with the page title 'Attention Required!

| Cloudflare,' indicating either a Cloudflare security challenge or a misconfigured backend. Nine of 94 security vendors on VirusTotal flagged the domain as malicious, aligning with its presence on one security blocklist (PhishDestroy). Gridinsoft assigned a trust score of 0/100, further supporting its classification as high-risk. The scam type is explicitly labeled as a fake exchange, though no specific brand impersonation is confirmed from the available data. Defenders should treat this domain as compromised infrastructure.

While currently offline, historical resolution to Cloudflare IPs and the use of Let's Encrypt certificates suggest potential for rapid redeployment. Monitoring for DNS reactivation, subdomain generation, or reuse of the same IP/ASN (Cloudflare) is recommended. Blocklisting at the DNS and network level is advised, given the domain's prior malicious activity and vendor detections. No evidence of associated malware distribution or advanced phishing kits was identified in the provided data.