cortexpips-pro[.]com

This domain is flagged as a high-risk cryptocurrency wallet phishing scam, designed to deceive users into disclosing sensitive wallet credentials or installing malicious software. Analysis indicates the infrastructure is specifically tailored to mimic legitimate cryptocurrency platforms, leveraging social engineering tactics to exploit victims. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain cortexpips-pro.com was registered on May 21, 2026, through NameSilo, LLC, and resolves to the IP address 92.113.23.132. It is currently offline but was previously detected by 13 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists and is referenced in four AlienVault OTX threat intelligence pulses. Additional technical details include the use of a Let’s Encrypt SSL certificate and front-end technologies such as PHP, amCharts, Bootstrap, and jQuery. The Gridinsoft trust score for this domain is 0 out of 100, further confirming its malicious nature. To mitigate risks associated with this threat, users should immediately block the domain and its associated IP address (92.113.23.132) at the network level. Cryptocurrency wallet holders are advised to verify all transaction requests through official channels and enable multi-factor authentication. Security teams should monitor for any residual connections to the domain or IP in logs and update endpoint protection rules to include this indicator of compromise. If credentials were entered on this site, affected accounts must be secured, and all associated keys or recovery phrases should be migrated to new, secure wallets.