odesforex[.]live

This domain, odesforex.live, was registered on February 23, 2026 through Shockhosting and resolves to the IP address 64.28.236.170 owned by AS395092 Shock Hosting LLC in the United States. The site is currently offline and presents the page title “Account Suspended”. No TLS certificate is in use, indicating that any traffic would be unencrypted. Technical fingerprinting shows the server software LiteSpeed with HTTP/3 support, and the domain is delegated to the authoritative nameservers ns1.vedaneservers.com and ns2.vedaneservers.com. Reputation services have flagged the domain: it appears on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL.

VirusTotal reports three positive detections out of ninety‑three scanned engines, reinforcing the malicious classification. The Gridinsoft trust score of zero further confirms a lack of legitimacy. The domain is identified as a brand‑impersonation campaign targeting Netflix, although the exact content of the landing page beyond the generic title has not been captured. Because the site is already offline, immediate containment actions focus on preventing future reuse of the same infrastructure.

Defenders should add the domain and its associated IP to outbound and inbound URL filtering rules, monitor the hosting provider and nameserver for additional malicious registrations, and watch for similar Netflix‑related impersonation attempts. Continuous threat‑intel feeds should be consulted for any re‑appearance of the domain or related indicators. Network sensors should log any attempted connections to the IP address and alert on HTTP requests lacking TLS. Users should be reminded not to enter Netflix credentials on untrusted sites and to enable multi‑factor authentication where possible.