denavo-ex.icu
Appeared in the .icu zone on Monday, August 31, 2026; by the end of that day the census found active website about crypto web3. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Brand-new .icu domain hosting an anonymous crypto-to-ruble 'exchanger' with no company identity, licence or KYC — the only action is handing your Telegram username to an unnamed 'operator' who then sends wallet details, the classic Russian-language obmennik funnel where funds are sent and never paid out. No impersonation of a third party (Denavo is its own name; the Telegram mention is just the contact channel).
Denavo is a cryptocurrency exchange service with its own branding and legitimate business model (P2P crypto-to-rubles conversion). The form collects Telegram username and crypto/fiat details for exchange facilitation, not credential harvesting. While the .icu TLD and sealed-room form posting are suspicious signals, the page is operating as a standalone service with transparent pricing and P2P exchange mechanics, not impersonating an established organisation. The risk is scam (unregulated crypto
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, August 31, 2026
Same data as JSON: /api/zone/domain/denavo-ex.icu. This page is not indexed by search engines and does not link to the site it describes.