insdie-exchange[.]com

The domain insdie-exchange.com was observed on 12 July 2026 as an active brand‑impersonation site targeting the Ethereum cryptocurrency ecosystem. The site’s page title, “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | InsdieExchange,” explicitly references Ethereum, confirming the impersonation intent. Risk level is classified as high.

Registration data shows the domain was created on 21 February 2026 through GMO Internet Group, Inc. d/b/a Onamae.com. Authoritative nameservers are ns1.verification-hold.suspended-domain.com and ns2.verification-hold.suspended-domain.com, both typical of domains placed under verification hold. DNS resolution points to 172.67.142.11, an address owned by AS13335 Cloudflare, Inc., located in the United States.

VirusTotal analysis reports 12 of 95 scanned security vendors flagging the domain, indicating a moderate detection rate across scanners. Gridinsoft assigns a trust score of 0/100, and the domain appears on one external security blocklist. The SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority – G2, which is a publicly trusted certificate. HTTP requests return status code 403, and server headers disclose Nginx and OpenResty as the underlying web technologies.

Defenders should immediately block insdie-exchange.com at perimeter and endpoint layers, and add the IP address 172.67.142.11 to network deny lists, acknowledging that the address is shared across Cloudflare services. Monitoring for additional domains registered through the same registrar or using the same verification‑hold nameservers is advised. Continuous ingestion of the domain into threat‑intel feeds, including PhishDestroy which already lists the domain, will help mitigate downstream abuse.