laodx[.]cn

Analysis indicates that laodx.cn was registered on 2025-03-29 by Chengdu Yisu Information Technology Co., Ltd. The domain resolves to 154.212.241.176, an address assigned to AS135097 LUOGELANG (FRANCE) LIMITED and geolocated in Hong Kong. The site serves HTTP traffic only; no SSL certificate is presented. An HTTP 301 response redirects visitors to the same host, and the authoritative name servers are ns1.judns.com and ns2.judns.com. The page title observed in the initial request is "欧义交易所App官方下载-安全区块链资产交易所，安全交易," which references a blockchain asset exchange and aligns with the declared brand impersonation of Ethereum.

VirusTotal has flagged the domain on 17 of 95 security engines, and Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence in malicious intent. The domain appears on one external blocklist and is already listed by PhishDestroy, confirming that threat‑intelligence feeds consider it active. The risk level is marked as high, and the threat type is identified as brand_impersonation targeting the Ethereum brand. The combination of a low trust score, multiple vendor detections, and the lack of TLS encryption underscores a hostile infrastructure designed to lure victims seeking legitimate blockchain services.

Defenders should add laodx.cn to network blocklists and configure DNS filtering to prevent resolution. Monitoring of outbound connections to 154.212.241.176 is advisable, as is the inclusion of the associated name servers ns1.judns.com and ns2.judns.com in threat‑intel feeds. Given the absence of a valid SSL certificate and the limited public intelligence beyond the observed page title, further investigation of the site’s payload and any associated command‑and‑control channels is recommended. Continuous review of security vendor updates for this domain will help maintain situational awareness as additional indicators may emerge.