xonedex[.]com

This domain, xonedex.com, was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is currently hosted behind Cloudflare (ASN 13335) with HTTP/3 enabled. DNS resolution points to IP 104.21.25.252, served by Cloudflare’s edge network in the United States. The site presents an HTTP 520 response and a page title of "xonedex.com | 522: Connection timed out", indicating that the underlying web server is not reachable at the time of testing. SSL is provided by Google Trust Services / WE1, confirming a valid TLS certificate chain. Google Safe Browsing classifies the domain as "SOCIAL_ENGINEERING", and PhishDestroy has already added it to its blocklist. The Gridinsoft trust score is 1 out of 100, reflecting a very low reputation. VirusTotal analysis shows that 3 of 93 scanned security vendors flagged the domain, reinforcing the malicious assessment. The domain appears on one additional security blocklist. The indicated scam type is "Social Media Phishing", suggesting that attackers may use the domain to harvest credentials or personal information via deceptive messages on social platforms. Because the site content is currently inaccessible, the exact payload or credential‑capture mechanisms cannot be confirmed. Defenders should treat xonedex.com as high‑risk. Immediate actions include adding the domain and its associated IP address (104.21.25.252) to network deny lists, configuring DNS filtering to block resolution, and monitoring outbound connections for attempts to reach the Cloudflare edge. Continuous re‑evaluation is advised in case the underlying server becomes active and begins delivering phishing content.