trust-dex[.]org

PhishDestroy identifies trust-dex.org as a live crypto drainer campaign currently under active investigation. This domain impersonates legitimate cryptocurrency exchange interfaces to facilitate unauthorized fund transfers. The threat is classified as a generic phishing campaign with high-risk potential due to its deployment of fake login portals designed to harvest private keys and seed phrases.

This domain was flagged by 1 of 95 VirusTotal vendors as of the investigation seed 45db0c. Registered through Global Domain Group LLC on May 08, 2026, trust-dex.org resolves to IP address 188.114.97.3 and operates under a Let's Encrypt SSL certificate. The domain remains unblocked across all major threat intelligence platforms, indicating its recent deployment and the need for proactive monitoring. Trust scores for this domain are critically low given the absence of vendor detections, registrar red flags, and the lack of historical reputation. The combination of recent registration, fresh SSL issuance, and zero detections suggests this infrastructure is actively being tested for evasion against automated scanning tools.

As of this report, the threat status is active with no mitigations in place. Users interacting with trust-dex.org risk irreversible cryptocurrency losses due to the domain’s fake deposit interfaces and key-harvesting mechanisms. PhishDestroy recommends immediate domain blocking at the firewall or DNS level using the IP address 188.114.97.3 and domain hash 45db0c. Additional precautions include verifying all cryptocurrency-related domains against PhishDestroy’s verified list prior to any transaction. Organizations should audit DNS logs for connections to this domain and update email filtering rules to block messages containing trust-dex.org. Continuous monitoring is advised due to the campaign's evolving nature and potential for rapid scaling.