nadextradesoption[.]live

The domain nadextradesoption.live is currently active and serves a web page titled “Nadextradesoption is one of the world's leading forex,stock and crypto trading platform”. Infrastructure analysis shows the domain resolves to IP 192.142.10.129, hosted in the Netherlands under AS214036 (Ultahost, Inc.). The site uses a Let’s Encrypt R12 certificate and returns HTTP 200 responses over HTTP/3, powered by LiteSpeed and a front‑end stack that includes Bootstrap, jQuery, Modernizr, OWL Carousel, and Modernizr. Registration occurred on 11 March 2026 through Global Domain Group LLC and the authoritative nameservers are pro1.ecositewebhost.com and pro2.ecositewebhost.com. The Gridinsoft trust score is 0 / 100 and three of ninety‑four VirusTotal scanners have flagged the domain, indicating malicious characteristics. It is listed on a single security blocklist and has been blocked by PhishDestroy. The declared scam type is “Fake Exchange”, suggesting an attempt to impersonate legitimate trading services. No deeper page content analysis is available, so the exact tactics and credential‑harvesting mechanisms remain unverified. Defenders should add the domain and its IP to outbound filtering rules, monitor for related traffic, and consider sinkholing the host if feasible. Ongoing observation is recommended to detect any evolution of the payload or abuse patterns.