dex-tradingx[.]lol

The domain dex-tradingx.lol was registered on July 31, 2025 through Dominet (HK) Limited and is currently taken offline. DNS resolution points to the IP address 47.83.164.18, which is hosted in Hong Kong under AS45102 Alibaba (US) Technology Co., Ltd. The authoritative nameservers are ns7.alidns.com and ns8.alidns.com, and the site does not present an SSL certificate, leaving traffic unencrypted. Google Safe Browsing has flagged the domain for social engineering, and VirusTotal reports that 15 of 95 security vendors have identified it as malicious.

Independent blocklists, including PhishDestroy and ScamSniffer, have listed the domain, and it appears on two additional security blocklists. The page title returned by the site is "dex," and the documented scam type is a "Fake Exchange," indicating that the site likely attempted to masquerade as a cryptocurrency trading platform to harvest credentials. Reputation services assign low confidence scores: Scamadviser rates the domain 35 out of 100, while Gridinsoft assigns a trust score of 0 out of 100.

Although the site is no longer reachable, the infrastructure—particularly the IP address and associated Alibaba‑owned hosting—remains a potential vector for related phishing campaigns. Defenders should continue to block the domain and its IP at perimeter defenses, monitor for any re‑registration attempts, and add the observed nameservers to threat‑intel feeds. Ongoing vigilance is advised to detect replicas that may reuse the same hosting or naming patterns, as the absence of TLS and the low trust scores suggest a low‑cost, disposable operation typical of generic phishing infrastructure.