synthet1x[.]cc

This domain, synthet1x.cc, is a confirmed brand impersonation site targeting Synthetix, a decentralized finance protocol. The domain was created on February 21, 2026, and registered through NiceNIC International Group Co., Limited. It resolves to IP address 104.21.34.7, which is hosted by Cloudflare (AS13335) in the United States. The SSL certificate is issued by Google Trust Services (WE1), and the domain uses Cloudflare nameservers (maciej.ns.cloudflare.com and saanvi.ns.cloudflare.com) with HTTP/3 support. Analysis shows the page title is "www.www.synthet1x.cc," which is a typo-squatted version of the legitimate Synthetix website.

The domain is currently flagged by 5 out of 93 security vendors on VirusTotal, indicating moderate detection coverage. It appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. The Gridinsoft trust score is 0 out of 100, reflecting a high level of distrust. The domain is currently offline, as its status is reported as taken offline. Defenders should ensure that any users who may have visited this domain are alerted to the impersonation risk, particularly those interacting with Synthetix-related services.

Since the domain is offline, the immediate threat is mitigated, but similar typo-squatted domains may appear under different TLDs or with slight spelling variations. Monitoring for related domains registered through NiceNIC or using Cloudflare infrastructure is recommended. The exact nature of the phishing page content has not been analysed, but the brand target and page title confirm it was designed to deceive users into believing they were interacting with Synthetix. No evidence of a specific phishing kit or malware distribution is present in the supplied intelligence.