en-netx[.]pages[.]dev

This domain, en-netx.pages.dev, is confirmed to operate as a crypto wallet drainer, specifically designed to impersonate the legitimate NetX Exchange platform. The site employs social engineering tactics to trick users into connecting their cryptocurrency wallets, subsequently draining funds through malicious smart contracts or unauthorized transactions. The page title, 'Exchange | NetX,' directly mimics the branding of the authentic NetX platform, increasing the likelihood of successful deception among unsuspecting users. Analysis of the domain's infrastructure reveals several critical indicators. The domain was registered on April 20, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3. Despite its malicious intent, the domain has not yet been flagged by antivirus engines, as evidenced by a VirusTotal detection score of 0/95. However, it appears on three security blocklists and is actively blocked by wallet security tools and browser extensions. The site employs HSTS, Cloudflare CDN, and HTTP/3, alongside a valid SSL certificate issued by Google Trust Services, which may lend an air of legitimacy to the fraudulent operation. Users who have visited en-netx.pages.dev or interacted with its content are advised to take immediate action. Disconnect any wallets linked to the site and revoke permissions for suspicious smart contracts using a blockchain explorer. Monitor wallet activity for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Report the domain to relevant security communities and avoid interacting with any communications or links associated with this site. Given the domain's use of Cloudflare infrastructure, users should remain vigilant for similar threats leveraging content delivery networks to evade detection.