ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
Domain security and threat intelligence
nodexdex[.]
nodexdex[.]com
Phishing and security check for nodexdex.com
“Nodex”
Threat verdict
Critical
100/100 evidence score
Availability
Last known active
Latest stored reachability observation
Risk signals
VirusTotal detections: 11/91
Spamhaus DBL: DBL_PHISH
Stored blocklist matches: 2
Last known active
11/91 VT
OTX: 3 refs
Jul 17, 2026
2 Blocklists
HK
HK
Evidence Summary
CRITICAL
Analysis of nodexdex.com shows a newly registered domain (created 12 May 2026) that is currently active and resolves to the IPv4 address 202.146.222.198. The domain is hosted on CloudNS infrastructure, as indicated by its four authoritative name servers (pns71.cloudns.net, pns72.cloudns.com, pns73.cloudns.net, pns74.cloudns.uk). The TLS certificate is issued by Let’s Encrypt (YR2), confirming that HTTPS is enforced. The registration was performed through NameSilo, LLC. The domain appears in one AlienVault OTX pulse, suggesting it has been previously observed in threat‑intel feeds. VirusTotal scans have flagged the domain by 8 of 91 security vendors, providing independent confirmation of malicious activity. The available data points collectively classify the site as a high‑risk generic phishing infrastructure. No public content analysis or page‑level indicators have been shared, so the exact phishing lure or targeted brand remains unknown. Defenders should block DNS resolution to 202.146.222.198, add nodexdex.com to URL filtering and email security deny lists, and monitor for any traffic to the CloudNS name servers associated with this domain. Continuous re‑scanning of the domain on multi‑engine platforms is recommended to capture any changes in detection status.
VirusTotal
11 det.
OTX references
URLScan
TLS Certificate
Let's Encrypt
Age
3 mo New
Observed status
Last known active 200
DestroyList
Listed
Data coverage
VirusTotal
11 / 91
URLQuery
not checked
PhishStats
not checked
OTX
3 community references
CF Radar
scan completed
URLScan capture
stored report
URLScan verdict
Analysis completed
DNS blocks
not checked
TLS
valid certificate, 63d
WHOIS
3 mo old
Screenshot
2 captures · 2 sources
Redirect chain
not probed
Network Security Intelligence Registrar context
Registrar context
NameSilo
Stored registration data identifies NameSilo as the registrar. PhishDestroy maintains separate registrar investigations; that broader material is contextual and is not an independent detection for this domain.
Threat Response Pipeline
Discovery
Checks
Reports
Availability
13/15
Public Blocklist Status
Stored Capture
Domain Intelligence
Domain
URLScan Verdict
Analysis completed
score 0 report ↗
Server / ASN
nginx · AS152194 CTG Server Limited
IP Reputation
abuse score 0/100 0 reports checked Jul 17, 2026
Registrar
NameSilo
(US)
PhishDestroy Investigation
(US)
PhishDestroy Investigation
IP Address
202.146.222.198
RegistrationCreated May 12, 2026 (88d · New) — Expires May 12, 2027
HTTP Status200
Technical detailsDNS, SSL SANs, timestamps
First DetectedJul 17, 2026
DOM Analysisanalyzed Jul 17, 2026score 100/100
IoC Extractionscanned Jul 29, 20260 wallet · 0 Telegram IoCs
Submitted URLhttp://nodexdex.com/
Nameserverspns71.cloudns.netpns72.cloudns.compns73.cloudns.netpns74.cloudns.uk
TLS Fingerprint
TLS Observationvalid from Jun 22, 2026scanned Jul 17, 2026
Favicon Hash
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Accreditation is a contract, not a safety seal.
Verify ICANN fees
Read RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Technologies · 4 identified
V
Vue.js
JavaScript frameworks
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org 100% confidence
N
Nginx
Web servers
Reverse proxies
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% confidence
H
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% confidence
H
HTTP/3
Miscellaneous
HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain
Submit evidence & help protect others
VirusTotal Analysis
11 / 91 security vendors flagged this domain
View on VT
Last analyzed Previous stored snapshot: 10 detections
alphaMountain.ai
BitDefender
CRDF
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
Kaspersky
LevelBlue
SOCRadar
Sophos
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of nodexdex.com · checked Jul 18, 2026
60
Needs Work
Performance
FCP
3.07s
First Contentful Paint
LCP
13.24s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
1ms
Total Blocking Time
SI
10.93s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Evidence & External Reports
Security Analysis
OSINT & Intelligence
DNS & Network
SEO & Domain
Were You Affected by This Site?
If credentials were compromised, report immediately. Do not engage with recovery scammers.
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Action Fraud
Report fraud and cybercrime in England, Wales and Northern Ireland
Contact centre0300 123 2040
PhishDestroy listing review Not a law-enforcement report
Domain Appeal
Request a review if you own this domain and believe the listing is incorrect
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
97-country directory
Template-based draft • optional AI wording assistance requires separate consent
Review and submit it yourself
Related Infrastructure & Reports
Content matches 4
Same registrar: NameSilo 6
Recent threat reports 4
Recently added threat reports.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive