idexon[.]im

The domain idexon.im is a generic phishing site designed to deceive users into disclosing sensitive information or performing actions that compromise security. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, idexon.im has been taken offline, reducing immediate risk but not eliminating the need for caution.

Technical analysis shows idexon.im was flagged by 1 of 95 VirusTotal security vendors, specifically Gridinsoft. Google Safe Browsing did not flag the domain, but it appears on 1 security blocklist (PhishDestroy). The domain was registered through an undisclosed registrar on February 21, 2026, and resolves to the IP address 172.67.178.32, hosted by Cloudflare in the US (AS13335). The SSL certificate is issued by WE1, and the observed page title was 'IDEX-CRYPTO'. Technologies detected include Cloudflare and HTTP/3, with nameservers felipe.ns.cloudflare.com and mary.ns.cloudflare.com.

Users who may have interacted with idexon.im should take immediate steps to secure their accounts. For credential phishing, change passwords on any accounts accessed through the site, enable two-factor authentication (2FA), and monitor for unauthorized transactions or login attempts. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader threat mitigation. If financial or cryptocurrency-related activity was involved, revoke any token approvals and consider transferring funds to a new wallet.