nytarex[.]com

This domain is identified as a fraudulent cryptocurrency exchange platform designed to deceive users into disclosing wallet credentials, private keys, or transferring digital assets to attacker-controlled addresses. Analysis of the domain's infrastructure and content patterns indicates it mimics legitimate exchange interfaces, employing social engineering tactics such as fake login portals, deposit prompts, and account verification scams. The primary objective appears to be unauthorized access to cryptocurrency holdings or direct theft of funds through manipulated transaction workflows. Evidence supporting this assessment includes detection by 12 out of 95 security vendors on VirusTotal, presence on three independent blocklists, and a Gridinsoft trust score of 0/100. The domain was registered on March 02, 2026, through Cloudflare, Inc., an uncommon registrar choice for legitimate financial services. Infrastructure analysis reveals it resolves to the IP address 188.114.97.3 and employs Cloudflare hosting with HSTS and HTTP/3 protocols, likely to evade basic detection mechanisms. The SSL certificate is issued by Google Trust Services, providing a false sense of security to potential victims. Users who interacted with nytarex.com should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet address. All credentials entered on the site must be considered compromised and should be changed across all platforms where reused. Monitor transaction histories for unauthorized activity and report the incident to relevant blockchain security teams or fraud reporting platforms. If financial loss occurred, file a report with local cybercrime authorities and provide all available transaction hashes, timestamps, and communication records for investigation.