dexno[.]top

The domain dexno.top was registered on September 28, 2025 through NiceNIC International Group Co., Limited and is currently taken offline. DNS resolution points to IP address 209.94.90.1, which belongs to AS40680 Protocol Labs in the United States. The domain is hosted on Cloudflare name servers (coen.ns.cloudflare.com and tia.ns.cloudflare.com) and does not present an SSL certificate, causing HTTP requests to return the status code 410 Gone.

Security telemetry shows the domain appears on one external blocklist and has been explicitly blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, indicating a high likelihood of malicious use. VirusTotal analysis records four of ninety‑five scanning engines flagging the domain, reinforcing the suspicion of malicious activity.

The limited detection footprint, combined with the absence of encryption and the 410 response, suggests the site was used for a generic phishing campaign before being deliberately taken down. Defenders should ensure that the domain and its resolving IP are added to local blocklists, monitor for any re‑registration attempts, and watch for new domains using the same registrar or Cloudflare name servers that may exhibit similar characteristics. Continuous threat‑intel feeds should be consulted for any emerging indicators related to this infrastructure, and network egress controls should be tuned to block traffic to the identified IP range.