para-dex[.]com

This domain is flagged as a high-risk phishing site specializing in crypto platform impersonation. Analysis indicates the site mimics legitimate decentralized exchange (DEX) services, specifically advertising "ZK-Encrypted Trading" for perpetual and options contracts. The threat type aligns with credential harvesting and crypto wallet drainer schemes, where victims are tricked into connecting wallets or entering private keys under false pretenses of secure trading. Infrastructure analysis reveals the following technical indicators: para-dex.com was registered on June 20, 2026, through TUCOWS.COM, CO., an atypical registrar for crypto platforms. It currently resolves to IP address 188.114.97.3, which has no prior association with legitimate trading infrastructure. VirusTotal detection shows 1/95 security vendors flagging the domain, a low but non-zero signal that suggests early-stage malicious activity. No blocklist entries or trust scores from major threat intelligence platforms were observed at the time of analysis, indicating the domain may still be in the initial deployment phase. Mitigation steps for this specific threat type include immediate blocking of the domain and IP at the network perimeter. Organizations should deploy indicators of compromise (IOCs) in endpoint detection systems, focusing on the domain, IP, and any associated wallet addresses advertised on the site. Users should be educated to verify domain registration dates (notably, legitimate platforms rarely use domains created within the last 30 days) and cross-check official project documentation before connecting wallets. Crypto wallet software should be configured to warn users when interacting with newly registered domains or those lacking verifiable on-chain history.