gateway[.]deextools[.]com

This domain, gateway.deextools.com, presents a directory listing titled "Index of /" with no legitimate content or landing page, indicating it is likely a placeholder or staging site for malicious activity. The site appears to be an unauthorized or deceptive variant associated with the DeFi tools platform "DEXTools," as suggested by the domain name. The threat it poses includes potential phishing, malware distribution, or hosting of malicious scripts, given its detection and low trust score.

Technical evidence shows the site is flagged by 8 out of 95 VirusTotal vendors, including ADMINUSLabs, CRDF, CyRadar, Fortinet, and G-Data, and is listed on 2 blocklists. The domain is hosted on IP 199.188.200.9, located in the United States, under AS22612 Namecheap, Inc. It was registered on 2025-08-27 via registrar NameCheap, Inc., with nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com. The SSL certificate is issued by Sectigo Limited (Sectigo RSA Domain Validation Secure Server CA). GridinSoft trust rating is 0 out of 100.

The site is currently down or offline, reducing immediate risk, but its recent creation, high detection rate, and zero trust score indicate a high risk profile if it becomes active. The combination of directory listing exposure, multiple vendor detections, and association with a known brand suggests this domain was prepared for malicious use and should be monitored.