derivetivaex[.]top

The domain derivetivaex.top was registered on October 13, 2025 through Gname.com Pte. Ltd. and resolves to the IP address 172.67.215.71, which is announced by AS13335 and hosted by Cloudflare, Inc. in the United States. The site presented a page title of "Uniswap" and is classified as a crypto‑scam that impersonates the Ethereum brand. Gridinsoft assigned a trust score of 0 out of 100, indicating a high likelihood of malicious intent. The domain appears on a single security blocklist and is specifically listed as blocked by PhishDestroy.

VirusTotal analysis recorded six detections out of ninety‑three security vendors, confirming that multiple independent scanners flag the domain as malicious. The SSL certificate presented under the label WE1, but no further certificate details were disclosed. As of the report date, July 24, 2026, the domain status is reported as offline, suggesting that the phishing infrastructure has been taken down or is temporarily inactive.

While the exact page content has not been captured, the combination of the Ethereum impersonation, Uniswap page title, low trust score, blocklist inclusion, and vendor detections strongly supports the assessment that the domain was used for a cryptocurrency‑related phishing campaign. Defenders should continue to block the domain and its associated IP address, monitor for re‑registration or similar aliases hosted on the same Cloudflare ASN, and incorporate the detection indicators (trust score, blocklist status, and VirusTotal count) into automated threat‑intelligence feeds. Ongoing vigilance is advised because the underlying hosting provider may be leveraged for additional malicious domains in the future.