Analysis of deltatrade-dex.com indicates it is an active phishing domain targeting cryptocurrency users, registered on July 22, 2026. The domain is hosted on 186.2.175.109 and uses nameservers ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com, suggesting infrastructure linked to Trustname.com's registrar services. As of July 30, 2026, the domain appears on one security blocklist and is blocked by PhishDestroy.
VirusTotal reports 5 of 91 security vendors flagging the domain, though the specific detection rules or payloads are not detailed in available intelligence. The registrar, Fewmoretaps OU d/b/a Trustname.com, has been associated with other high-risk domains, though no direct attribution to a known phishing kit or threat actor group is confirmed. The domain's name, deltatrade-dex.com, implies a decentralized exchange (DEX) theme, a common lure for cryptocurrency-related phishing schemes.
Defenders should treat this domain as high-risk and consider blocking it at the DNS or proxy level. Network security teams are advised to monitor for connections to 186.2.175.109 and review logs for any interaction with this domain, particularly in environments where cryptocurrency activity is present. Further analysis of the site's content, SSL certificates, and hosting provider may provide additional indicators of compromise, but as of this report, the exact nature of the phishing content remains unconfirmed.