coincheckpro[.]io

Analysis of the domain coincheckpro.io indicates a confirmed phishing campaign impersonating the MEKC cryptocurrency exchange platform. The domain was registered on September 4, 2025, through NameSilo, LLC, and is currently offline following detection. Infrastructure analysis reveals resolution to IP 172.67.192.234, hosted on Cloudflare's network (AS13335) in the United States, with nameservers ignat.ns.cloudflare.com and zara.ns.cloudflare.com. No SSL certificate was observed at the time of assessment.

Detection data shows the domain appears on one security blocklist (PhishDestroy) and was flagged by one of 95 vendors in a VirusTotal scan, suggesting limited but targeted detection. The Gridinsoft trust score of 0/100 further supports the classification as malicious. The absence of an SSL certificate and the domain's rapid takedown align with common phishing infrastructure patterns, where operators prioritize speed over technical refinements. Defenders should treat this domain as a confirmed brand-impersonation threat targeting MEKC users.

While the site is currently offline, historical DNS records and associated IP ranges (172.67.192.0/24) may warrant monitoring for related activity. The use of Cloudflare nameservers does not imply endorsement but reflects common abuse of CDN services for phishing operations. No additional page content or phishing kit details were available for analysis, limiting further classification of the attack vector. Organizations are advised to block the domain at the DNS level and review logs for prior connections from internal networks.