coiniq[.]pages[.]dev

This domain, coiniq.pages.dev, is under investigation for brand impersonation targeting Ethereum. Registered on April 6, 2026, through Cloudflare, Inc., it resolves to IP 172.66.47.121, hosted on Cloudflare infrastructure in Canada. The page title, 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | CoinIQ,' explicitly mimics a legitimate cryptocurrency exchange, aligning with the reported scam type of a fake exchange. The domain remains active, returning an HTTP 200 status, and is currently flagged by one security blocklist. Gridinsoft assigns it a trust score of 0/100, indicating high suspicion. No vendor detections were recorded at the time of the last scan, though absence of detections does not confirm safety. Nameservers (angela.ns.cloudflare.com, lochlan.ns.cloudflare.com) and SSL certificate (Google Trust Services / WE1) are consistent with Cloudflare-hosted domains, which are frequently abused for phishing due to their low-cost or free hosting options. Defenders should treat this domain as malicious until further analysis confirms otherwise. Block access to 172.66.47.121 and monitor for connections to coiniq.pages.dev or related subdomains. If internal logs show user interaction with this domain, initiate incident response procedures for potential credential theft or financial fraud. Additional analysis of the site’s content and backend infrastructure is recommended to determine the full scope of the threat.