cadex-trading[.]com

The domain cadex-trading.com represents an elevated risk due to its classification as a generic phishing site, particularly targeting cryptocurrency and forex users. The domain's fraudulent intent is corroborated by its inclusion in multiple threat intelligence platforms and blocklists, highlighting its potential to deceive users into divulging sensitive financial information.

Analysis indicates significant red flags for cadex-trading.com. Notably, 15 out of 95 security vendors on VirusTotal have flagged it as malicious, underscoring substantial industry consensus regarding its threat level. Furthermore, the domain was created on June 08, 2025, through Global Domain Group LLC, a detail which suggests a relatively recent origin potentially employed to evade detection initially. The site resolves to IP address 198.251.89.220 and employs technologies such as PHP, Bootstrap, LiteSpeed, Smartsupp, Select2, Modernizr, jQuery, and HTTP/3, indicative of a sophisticated web setup meant to appear legitimate. It has also been identified by the AlienVault OTX platform within two different threat intelligence pulses and is actively blocked by at least one major security service, PhishDestroy, while possessing a trust score of 0/100 from Gridinsoft.

Mitigation strategies for protecting against the phishing threat posed by cadex-trading.com should include immediate network-level blocking of the domain and associated IP address. Security teams are advised to update endpoint protection solutions and employ DNS filtering to prevent access to newly registered or suspicious domains. Users should be educated on recognizing phishing attempts, particularly those involving financial transactions or cryptocurrency investments. Continuous monitoring for related domains may help detect any further attempts at malicious activity by the same threat actor group.