nexdex[.]bet

PhishDestroy identifies nexdex.bet as a credential theft domain with active phishing infrastructure, currently under investigation for suspected crypto drainer operations. This domain was flagged after zero out of 95 VirusTotal scanners detected malicious indicators during initial analysis, despite clear signs of impersonation risks. The domain resolves to IP address 172.67.135.33 and utilizes a Let's Encrypt SSL certificate, creating false trust signals for potential victims. This domain poses severe risks as it appears designed to harvest login credentials through brand impersonation tactics. It was created on March 08, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar known to host both legitimate and malicious domains. The complete lack of VirusTotal detections (6/95) indicates either extremely recent deployment or sophisticated evasion techniques, rather than genuine clean status. Technical analysis shows the domain's infrastructure includes IP 172.67.135.33 and SSL certificate issued by Let's Encrypt, both commonly abused components in phishing campaigns. If you accessed nexdex.bet at any time, immediately check all accounts for unauthorized access and enable two-factor authentication. Do not enter any credentials or cryptocurrency wallet connections on this domain. Clear your browser cache and cookies related to crypto platforms. Report the domain through your browser's safe browsing tools and consider running a malware scan. Share this alert with your organization's security team if this domain appears in company communications. Always verify website authenticity through official channels before any credential submission.