feadex[.]com

Analysis of feadex.com, created on February 21, 2026, shows that the domain is currently offline but was previously identified as a cryptocurrency‑focused impersonation campaign targeting the Ethereum brand. The site presented the page title "Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | FeaDex," which aligns with the declared scam type of a crypto scam. Infrastructure inspection reveals that the domain resolved to the IPv6 address 2606:4700:3036::6815:10e5, hosted within the United States under AS13335 Cloudflare, Inc. The SSL certificate associated with the site is identified as WE1, indicating a valid TLS layer despite the malicious intent.

Threat intelligence indicates that the domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. VirusTotal analysis recorded a single positive detection out of 93 security vendors, confirming at least one vendor’s recognition of malicious behavior. The brand impersonation aspect is explicitly noted, with the site attempting to lure users by referencing Ethereum in its title and content.

While the domain is now taken offline, its recent creation date and rapid deployment suggest a short‑lived but targeted operation. Defenders should update URL filtering rules to include feadex.com, monitor for any re‑registration attempts, and consider tightening controls around outbound connections to Cloudflare‑hosted IPv6 ranges associated with newly created domains. Additionally, security teams should educate users about unsolicited cryptocurrency exchange offers that reference well‑known brands, reinforcing verification of legitimate services before any transaction.