icendex[.]com

Analysis of the domain icendex.com indicates active brand impersonation targeting Ethereum users. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the site currently resolves to IP address 172.67.131.168, hosted on Cloudflare's network (AS13335) in the United States. No SSL certificate is present, which is atypical for legitimate cryptocurrency exchanges and increases exposure to interception risks. The page title, 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Icendex,' explicitly positions the site as a cryptocurrency trading platform, aligning with the reported scam type of a crypto scam.

Detection data shows the domain is flagged by three security blocklists, including PhishDestroy, MetaMask, and SEAL. Additionally, seven of ninety-five security vendors on VirusTotal have detected the domain as malicious, though the absence of detections from other vendors does not confirm safety. AlienVault OTX has recorded the domain in one threat intelligence pulse, further corroborating its association with malicious activity. Nameservers ns3.my-ndns.com and ns4.my-ndns.com are used, which have been observed in previous phishing campaigns. The domain returns an HTTP 200 status, indicating an active and accessible web server.

Gridinsoft's trust score of 0/100 reflects a complete lack of credibility based on their assessment criteria. Defenders should treat icendex.com as a high-risk domain. Network-level blocking is recommended for organizations handling cryptocurrency transactions or Ethereum-related services. Users encountering this domain should avoid interaction, particularly any requests for wallet connections, deposits, or personal information. Given the domain's active status and confirmed detections, continued monitoring for related infrastructure or newly registered lookalike domains is advised.