newodex[.]com

The domain newodex.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently taken offline. Infrastructure analysis shows the domain resolves to the IP address 104.21.36.51, which belongs to AS13335 operated by Cloudflare, Inc., and is geolocated in the United States. The domain is served by Cloudflare nameservers coraline.ns.cloudflare.com and zac.ns.cloudflare.com, but it does not present an SSL/TLS certificate, indicating that any web service would be delivered over plain HTTP if it were active. The page title observed for the site was "NEWODEX - Global Crypto Exchange," suggesting an attempt to present a cryptocurrency exchange façade.

Threat intelligence flags the domain as an impersonation of the Aave brand and categorises the activity as social media phishing, specifically targeting users of crypto‑related platforms. Detection data shows the domain appears on three security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis recorded five positive detections out of ninety‑three scanning engines, reinforcing the malicious assessment. Additional reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, indicating a highly untrusted status.

While the site is offline, the presence of the domain on multiple blocklists, its low trust score, and the association with Aave impersonation provide concrete evidence of a phishing campaign. Defenders should continue to block the domain at network and DNS layers, monitor for any reactivation attempts, and add the domain to internal threat‑intel feeds. Analysts should also watch for related domains that share the same registrar, Cloudflare infrastructure, or similar naming patterns, as they may be part of a broader impersonation infrastructure targeting Aave users.