Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 18 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
exdex[.]xyz
“Обменный пункт электронных валют”
exdex.xyz — असत्यापित. ब्रांड प्रतिरूपण: FedEx; घोटाले का प्रकार: Impersonation. साक्ष्य सारांश: VirusTotal 6/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); PhishDestroy score 68/100. रजिस्ट्रार: Namecheap.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of exdex.xyz, created on October 03, 2024 through the Namecheap Inc registrar, shows the domain is actively serving a generic phishing campaign. The domain resolves to the IPv4 address 91.108.190.154 and is hosted on Cloudflare infrastructure, as indicated by the authoritative name servers celine.ns.cloudflare.com and moura.ns.cloudflare.com. Threat intelligence sources have already taken defensive action: the site is listed on a single security blocklist and has been specifically blocked by the PhishDestroy service.
On VirusTotal the domain was examined by 91 security vendors, of which three returned a positive detection, reinforcing the malicious classification. Current status remains active, confirming that the phishing infrastructure continues to be operational. The limited publicly available data means that page‑level attributes such as HTTP response codes, SSL certificate details, page title, or any referenced brand targets have not been disclosed, leaving those aspects of the attack surface unverified.
Defenders should prioritize immediate blocking of exdex.xyz at the DNS and proxy layers, as well as the associated IP address 91.108.190.154, to prevent end‑user exposure. Continuous monitoring of the Cloudflare name servers for any changes, and periodic re‑scanning with VirusTotal or equivalent multi‑engine services, are recommended to capture any evolution in the domain’s detection profile. Organizations employing web filtering should also ensure the domain is added to internal blocklists and that any outbound traffic to the identified IP is logged and investigated for potential compromise.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 9 identified
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.
wordpress.org 100% विश्वासProton Mail is the world’s largest secure email service with over 70 million users. Available on Web, iOS, Android, and desktop. Protected by Swiss privacy law.
proton.me 100% विश्वासYandex.Metrica is a free web analytics service that tracks and reports website traffic.
metrika.yandex.com 100% विश्वासJSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 100% विश्वासjQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.
jqueryui.com 100% विश्वासjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% विश्वासवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of exdex.xyz · checked Jul 27, 2026
साक्ष्य और बाहरी रिपोर्टें
“This is a coordinated "frozen order" exchange scam operated through a Telegram account named "Flowisland Support." The group poses as a cryptocurrency exchange service. Method of operation: After a victim sends crypto for a swap (SOL to TRX), the operators claim the order is "frozen" due to a fabricated network error — e.g. a "7th validator error" on Solana, or a claimed amount mismatch (5.55 vs 5.56 SOL). No such error exists; this is a pretext. They then demand the victim make a second ident”
PD-20260727-D0E5F0 Recipient: abuse@namecheap.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।