paradexfoundation[.]app

This domain is flagged for elevated-risk cryptocurrency phishing activity targeting users of the Paradex Foundation platform. Analysis indicates the infrastructure is designed to harvest wallet credentials, seed phrases, and private keys through fraudulent login portals or token distribution scams. The domain presents a direct financial threat to individuals interacting with decentralized finance (DeFi) or cryptocurrency services. Infrastructure analysis reveals the domain was registered on June 10, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 172.67.192.149 and uses an SSL certificate issued by Google Trust Services. Security vendor detections on VirusTotal report 6 out of 95 engines flagging the domain as malicious. The domain appears on one security blocklist and is actively blocked by PhishDestroy. The page title, 'Paradex Foundation,' directly mimics the legitimate entity to deceive targets. Mitigation requires immediate blocking of the domain and associated IP address across network security controls. Organizations should update endpoint protection rules to detect and prevent access to this infrastructure. Users should be alerted to verify domain authenticity before entering credentials or connecting wallets, particularly for platforms resembling Paradex Foundation. Security teams are advised to monitor for related domains registered through the same registrar or resolving to the same IP range, as threat actors frequently reuse infrastructure components. Incident responders should treat any interaction with this domain as a potential credential compromise event.