tradexspro[.]com

PhishDestroy has identified tradexspro.com as an active generic phishing threat, specifically a crypto-themed phishing site designed to harvest credentials or lure victims into connecting their wallets. The domain, registered on November 22, 2024, through Ultahost, Inc., presents itself with the page title "Tradexspro Global" to impersonate a legitimate trading platform. The site uses a Let's Encrypt SSL certificate (R12) to appear secure, but such certificates are freely available and do not indicate legitimacy.

Technical indicators underscore the risk: VirusTotal shows 3 out of 95 security vendors flagging this domain, and the site resolves to IP address 79.133.41.61. It also appears on one security blocklist, though it has not yet been flagged by Google Safe Browsing. The domain's recent creation date and registrar choice are consistent with malicious infrastructure. These factors collectively point to a high-confidence phishing operation with elevated risk for crypto users who may be tricked by the professional-looking interface.

The domain has been taken down, meaning the hosting provider or registrar has disabled the site in response to reports. However, remaining risk includes potential redirects or mirror sites hosted on the same IP or by the same threat actor. Users who have interacted with tradexspro.com should change any passwords used on the site and avoid reusing them elsewhere. Crypto wallet users should revoke any permissions granted and monitor for unauthorized transactions. PhishDestroy recommends reporting the domain to additional blocklists and continuing to monitor for related domains.