nexo-drops[.]com

This domain, nexo-drops.com, poses a high-risk brand impersonation threat designed to deceive users into believing they are interacting with a legitimate cryptocurrency rewards platform. The site mimics the branding and page structure of Nexo, a known digital asset wealth platform, to trick visitors into entering sensitive credentials or transferring funds under the guise of exclusive token distributions or promotional offers. The specific target appears to be users of the Across protocol, suggesting a coordinated effort to exploit cross-chain transaction participants with false incentives. Analysis indicates this domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with abusive registrations. Infrastructure review reveals the domain resolves to 104.21.84.228, hosted on Cloudflare’s network (AS13335), and currently lacks any SSL certificate, a red flag for secure communication. Detection metrics show 12 out of 95 security vendors on VirusTotal flag the domain as malicious, while it appears on four independent security blocklists. Additional indicators include its takedown status and prior blocking by multiple threat intelligence platforms. If you visited nexo-drops.com or interacted with its content, immediate action is required. Disconnect any connected wallets from the site and revoke all active session permissions using a trusted blockchain explorer. Scan your device for malware using updated security tools, as phishing pages may deploy malicious scripts. Monitor linked accounts for unauthorized transactions and report the incident to your wallet provider or exchange. Never re-enter credentials on suspicious sites, even if they appear legitimate, and verify all future communications through official channels only.