nemopex[.]com

PhishDestroy identifies nemopex.com as an active crypto drainer phishing domain under investigation, posing a significant threat to cryptocurrency users. This domain is currently flagged as a generic phishing site and is actively resolving to suspicious infrastructure, warranting immediate caution.

This domain was flagged by 3 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely detected by security tools despite its malicious nature. It was registered through MAT BAO CORPORATION, resolves to IP address 172.67.139.253, and was created on March 27, 2026. The domain utilizes a Let's Encrypt SSL certificate, which may be leveraged to appear legitimate to unsuspecting users. Given its recent creation and low detection rate, this domain represents a high-risk threat that could escalate rapidly.

The current status of nemopex.com remains under investigation, but its infrastructure and low VirusTotal detection suggest it is actively distributing crypto drainer malware. Users who encounter this domain should avoid any interaction, including clicking links or downloading files. To mitigate risk, block this domain at the network level and report it to security vendors like VirusTotal for further analysis. Exercise extreme caution with cryptocurrency-related websites, especially those with recent domain registrations or unfamiliar registrars. Always verify URLs and use hardware wallets or trusted platforms for transactions.