takesmartex[.]com

takesmartex.com is currently active and hosts a page titled “Take Smartex | Cryptocurrency trading and invest platform”. The site presents itself as a cryptocurrency exchange, which aligns with the classified scam type “Fake Exchange”. The domain was registered on 16 June 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is served by Cloudflare’s DNS infrastructure (meilani.ns.cloudflare.com, stan.ns.cloudflare.com). DNS resolution points to IP 104.21.16.103, an address owned by AS13335 Cloudflare, Inc., located in the United States. HTTP requests return a 200 status code, indicating the web server is reachable. The TLS certificate is issued by Google Trust Services under the WE1 intermediate, confirming the use of a legitimate certificate authority. Reputation services show a Gridinsoft trust score of 0/100 and six of ninety‑one VirusTotal scanners flag the domain. The domain appears on one external blocklist and is already listed by PhishDestroy. The risk assessment is high, and the campaign is marked as active. While the page content has not been independently examined, the combination of a recent registration, use of reputable TLS, and alignment with a known fake‑exchange pattern suggests a deliberate phishing operation targeting cryptocurrency investors. Defenders should add the domain and its resolving IP to network blocklists, monitor DNS queries for the associated Cloudflare nameservers, and consider sinkholing the address to disrupt traffic. Ongoing observation is recommended to detect any evolution of the infrastructure or additional indicators of compromise.