coinex[.]click

The domain coinex.click is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform Aave. It presents itself as a legitimate service under the name 'CoinEx' to deceive victims into interacting with fraudulent cryptocurrency transactions. As of the latest verification, coinex.click has been taken offline, though it previously posed an elevated risk of financial loss through scams without employing a known drainer kit.

Technical indicators reveal limited but notable detection: 1 of 95 VirusTotal security vendors flagged coinex.click, while Google Safe Browsing did not identify it as malicious. The domain appears on 1 security blocklist, specifically PhishDestroy. It was registered through GMO Internet, Inc. d/b/a Onamae.com on April 27, 2026, and resolved to the IP address 104.21.112.1, hosted by Cloudflare in the US. The SSL certificate was issued by WE1, and the observed page title was 'CoinEx'. Gridinsoft assigned a trust score of 10 out of 100, further indicating its suspicious nature.

Users who interacted with coinex.click should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords on the legitimate Aave platform and enable two-factor authentication. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units, and consider submitting it to additional blocklists to prevent further abuse.