cexio[.]app

Analysis of the domain cexio.app indicates it is currently classified as a high-risk phishing threat. The domain was created on July 17, 2026, and has been registered through Dynadot LLC. It is actively resolving to the IP address 104.21.7.98, which raises concerns about its intentions and potential target victims. Current intelligence reveals that the domain has been flagged by one out of 91 security vendors on VirusTotal, suggesting limited recognition by security tools, but it is notable that it has been identified and blocked by PhishDestroy, underscoring its malicious nature.

Furthermore, it is present on one security blocklist, indicating that additional security measures have been considered necessary by various threat intelligence platforms. The nameservers associated with this domain are olof.ns.cloudflare.com and sue.ns.cloudflare.com, both of which are managed by Cloudflare, a provider that offers services including CDN and DNS management, often used to obscure the true intent of phishing operations.

As this domain remains active, it is advisable for organizations and individuals to employ URL filtering and email security solutions to block access to this domain, and to remain vigilant against potential phishing attempts associated with it. Monitoring of any associated indicators of compromise is also recommended as part of a comprehensive cybersecurity strategy.