app-convexfinance[.]net

PhishDestroy identifies the domain app-convexfinance.net as an active generic phishing page that impersonated the legitimate Convex Finance platform to harvest user credentials. The fraudulent site presented a spoofed login interface designed to trick visitors into entering sensitive account information, which would then be transmitted to attacker-controlled servers. The campaign relied on visual deception and rushed urgency to bypass user scrutiny and bypass automated detection mechanisms. This domain was flagged by only 1 out of 95 security vendors on VirusTotal despite its clear malicious intent, complicating early detection for users without specialized tools. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on February 09, 2026, and resolved to IP address 188.114.97.3 before being taken offline after reports reached security teams. The page title deliberately included redundant subdomains (www.www.app-convexfinance.net) to appear legitimate while exposing its fraudulent nature upon close inspection. If you accessed this domain at any point, immediately change passwords for Convex Finance or any related cryptocurrency services. Enable multi-factor authentication where available and review account activity for unauthorized transactions. Monitor connected wallets and applications for signs of compromise, and consider revoking any permissions granted to suspicious domains. Report the incident to the legitimate Convex Finance support channels and your organization’s security team if this domain appeared in a work context.