nixotradex[.]org

This domain is flagged as a confirmed cryptocurrency phishing portal designed to harvest wallet credentials and private keys. Analysis indicates a targeted attack vector against users of decentralized finance platforms, with infrastructure specifically configured to mimic legitimate exchange interfaces. The elevated risk classification stems from the domain's active exploitation in recent campaigns and its presence on multiple security blocklists. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 198.251.89.168 and was registered on April 30, 2026 through HOSTINGER operations, UAB, a registrar frequently associated with mass-hosting of malicious domains. Security vendor detections show 4/95 engines flagging the domain on VirusTotal, while threat intelligence platforms report its inclusion in 8 distinct pulses. The domain appears on 3 security blocklists and maintains a trust score of 0/100, with confirmed blocking by cryptocurrency security tools and phishing prevention systems. Mitigation requires immediate action from both individual users and network administrators. Users should verify all cryptocurrency transaction URLs against official sources, enable hardware-based two-factor authentication for wallet access, and implement browser-based phishing filters that detect credential harvesting attempts. Network administrators should enforce DNS-level blocking of the domain and its associated IP address, while monitoring for any attempts to access this infrastructure from internal networks. Given the domain's offline status, organizations should remain vigilant for similar phishing domains registered through the same provider or resolving to adjacent IP ranges, as threat actors frequently rotate infrastructure to evade detection.