coinexor[.]com

coinexor.com was registered on February 21, 2026 through the Hostinger operations service (UAB) and is currently marked as offline. The domain resolves to the IP address 208.98.35.233, which belongs to AS46844 Sharktech and is geolocated in the United States. An SSL certificate with the identifier R11 is present, indicating that TLS is enabled but providing no evidence of extended validation. The public page title returned by the site reads “CoinExor - Cryptocurrency Exchange | Buy & sell Bitcoin, Ethereum, Tether instantly,” which suggests a generic cryptocurrency exchange offering. The threat profile classifies the domain as a crypto scam that impersonates the brand “aave.” VirusTotal reports that two of ninety‑three security vendors flagged the domain, and the site appears on one external blocklist.

Gridinsoft assigns a trust score of 0 out of 100, and the domain is listed by PhishDestroy as blocked. The combination of a recent registration, hosting on a shared provider, low trust scores, and the presence of a brand‑impersonation tag indicates a deliberate attempt to lure victims into a fraudulent cryptocurrency transaction flow. Evidence of the specific phishing kit or landing page content is not available because the site is offline, and no further analysis of HTTP responses or JavaScript payloads has been conducted. Consequently, the exact mechanism used to harvest credentials or funds cannot be confirmed at this time.

However, the observed indicators—recent creation, low trust rating, brand impersonation, and partial vendor detection—are consistent with known crypto‑draining campaigns that target users of the aave platform. Defenders should add coinexor.com to internal blocklists, monitor DNS queries for the associated IP 208.98.35.233, and enforce domain‑based filtering for any traffic attempting to reach the site.