nanofex[.]com

PhishDestroy identifies nanofex.com as an active credential theft campaign targeting users with fake login pages. This domain mimics a legitimate platform to harvest usernames and passwords, putting crypto assets and personal data at risk. The site’s malicious intent is confirmed by low but notable detection on VirusTotal and active infrastructure tied to recent campaigns.

This domain was flagged by 1 out of 95 VirusTotal security vendors, created on April 18, 2026, and registered through Fewmoretaps OU d/b/a Trustname.com. It resolves to IP 172.67.174.31 and uses a Let’s Encrypt SSL certificate to appear legitimate. The domain’s recent creation and low detection rate suggest it is part of a fast-evolving phishing operation designed to evade early detection.

If you visited nanofex.com, immediately change your passwords for any accounts exposed during login attempts and enable two-factor authentication. Scan your devices for malware, especially if you entered credentials, and monitor financial accounts for suspicious transactions. Report the domain to your IT team or security provider and avoid clicking links in emails or messages claiming to be from this platform.