kusdex[.]com

The domain kusdex.com was registered on 21 February 2026 via NiceNIC International Group Co., Limited and is hosted on Cloudflare’s network (ASN 13335) with the IPv4 address 172.67.191.176 located in the United States. The authoritative nameservers are princess.ns.cloudflare.com and skip.ns.cloudflare.com, and the site does not present an SSL certificate, indicating that HTTPS was not enforced at the time of observation. The page title returned from the live host reads “KUSDEX • Cryptocurrency Exchange,” suggesting the operator is attempting to masquerade as a legitimate cryptocurrency exchange named KUSDEX. The threat classification in the intelligence set is “Social Media Phishing,” and the overall risk rating is elevated. Infrastructure analysis shows that the domain appears on a single security blocklist and has been blocked by the PhishDestroy service.

VirusTotal reports that two of ninety‑three scanning engines flagged the domain, providing additional confirmation of malicious intent. No other public reputation services are cited, and the domain is currently listed as offline, which may be a temporary takedown or an intentional shutdown after a campaign. Defenders should treat kusdex.com as a high‑confidence phishing indicator. Network‑level controls ought to block traffic to the IP 172.67.191.176 and to the domain itself, especially from endpoints that access social‑media platforms where the lure may be distributed.

Because the domain uses Cloudflare’s shared infrastructure, blocking the entire IP range could cause collateral impact; therefore, a domain‑based blocklist entry is preferred. Monitoring for newly‑registered domains that share the same registrar (NiceNIC International Group) or similar naming patterns (e.g., *.kusdex.*) can help catch follow‑up campaigns.