# nordcrext.com — SUSPICIOUS

> Stay safe online—avoid nordcrext.com, a low-risk phishing domain. Verify URLs carefully and do not share personal info on suspicious sites.

## Summary
PhishDestroy identifies nordcrext.com as a generic phishing domain registered recently on January 24, 2026. Classified as low risk, this domain aims to deceive users by masquerading as a legitimate service. The domain’s early detection stage warrants caution despite minimal current threat activity.

Technically, nordcrext.com resolves to IP address 188.114.96.3 and is registered through Ultahost, Inc. VirusTotal flags this domain by 1 out of 95 security vendors, indicating limited but present suspicion. The domain’s fresh creation date and registry details suggest it is likely part of a low-impact phishing infrastructure still under observation.

Currently, nordcrext.com remains active and under continual monitoring by PhishDestroy. Users are advised to exercise vigilance by avoiding interaction with this domain and reporting any suspicious activity. Security teams should consider adding this domain to watchlists while awaiting further intelligence to assess evolving risk.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Nord Crext Bank- Your New Favorite Bank

## Domain Intelligence
- Registered: 2026-01-24 02:34:10
- Registrar: Ultahost, Inc.
- IP: 188.114.96.3
- Nameservers: braden.ns.cloudflare.com rita.ns.cloudflare.com

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Netcraft"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/PZGm8RBV/657b6e193b95.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/3c379a6a-0ec3-42c9-bb06-e1975958aa99
- PhishDestroy: https://phishdestroy.io/domain/nordcrext.com/
- LLM endpoint: https://phishdestroy.io/domain/nordcrext.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nordcrext.com/
Last updated: 2026-03-19