cnssssex3[.]com

PhishDestroy has identified cnssssex3.com as an active crypto drainer phishing domain, designed to steal cryptocurrency wallet credentials and drain victims' funds. The site impersonates legitimate crypto platforms to trick users into connecting their wallets, leading to asset theft. This threat is part of a broader campaign targeting cryptocurrency holders.

Technical indicators confirm the high risk: VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious. It was registered on March 22, 2026, through Dynadot Inc, and resolves to IP address 185.53.179.146. The domain is not currently listed on Google Safe Browsing, but multiple blocklists have flagged it, contributing to its high-risk status. These exact numbers underscore the credibility of the threat.

As of the latest check, cnssssex3.com remains active and accessible. Users are strongly advised to avoid visiting the site, entering any credentials, or connecting cryptocurrency wallets. PhishDestroy recommends blocking the domain at the network level and reporting it to relevant authorities. While no takedown has been initiated yet, vigilance and immediate action can prevent further victimization.