stealth-ex[.]io

This domain, stealth-ex.io, is actively serving a fraudulent cryptocurrency exchange front‑end, as indicated by the page title “Online Crypto Exchange Platform with the Best Rates | exchange.taxi” and the classification “Fake Exchange”. The site resolves to IP 186.2.175.41, which is registered to Iqweb LLC in Belize. The server presents a valid Let's Encrypt R12 certificate, but the underlying host is protected by DDoS‑Guard, a common service for malicious operators seeking availability. Reputation metrics are extremely low, with Gridinsoft assigning a trust score of 0 out of 100. The domain is currently listed on three security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows that 10 of 91 scanners flagged the domain, and AlienVault OTX contains two pulses referencing it. HTTP response code is 200, indicating the page is reachable. The risk level is high and the infrastructure remains active. Defenders should immediately add stealth‑ex.io and its resolving IP 186.2.175.41 to network deny lists, enforce URL filtering, and monitor outbound connections for attempts to contact the domain. Because the site uses a legitimate TLS certificate, TLS inspection may be required to detect payloads. Continuous threat‑intel feeds should be consulted for any new indicators related to Iqweb LLC or DDoS‑Guard clusters that may host additional malicious sites.