fiatronex[.]com

Analysis on fiatronex.com indicates that the domain was registered on 19 June 2025 through Hello Internet Corp and is currently hosted behind Cloudflare (AS13335) with the IP address 188.114.97.3 located in the United States. The site presented a Google Trust Services/WE1 SSL certificate and advertised services such as swap, trade, P2P and ICO in its page title “fiatronex - Swap | Trade | P2P | Ico | fiatronex”. The domain is flagged as a crypto‑scam that impersonates the Ethereum brand. Defensive feeds show that PhishDestroy has taken the domain offline and it appears on one additional security blocklist.

VirusTotal scans reported two detections out of ninety‑five vendors, and Gridinsoft assigned a trust score of 0 / 100, indicating a high likelihood of malicious intent. Cloudflare’s HTTP/3 support and the use of roxy.ns.cloudflare.com and toby.ns.cloudflare.com as authoritative nameservers are consistent with typical infrastructure used by fast‑moving phishing operations. Evidence confirms the presence of brand‑impersonation tactics, but the actual landing page content has not been captured because the domain is offline, limiting current visibility into payload delivery mechanisms.

The low trust score, multiple vendor detections, and confirmed blocklist listings provide sufficient confidence to classify the domain as a high‑risk indicator. Defenders should proactively block the domain at DNS and proxy layers, add the IP address 188.114.97.3 to network‑level deny lists, and monitor for any re‑registration attempts or derivative domains that reuse the same registrar or hosting provider. Continuous ingestion of threat‑intel feeds that reference fiatronex.com will aid in early detection of related campaigns.