node03[.]nasdaqt[.]vip

The domain node03.nasdaqt.vip is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand but presents itself as a 'Nasdaq Trading Platform' to lure victims. As of the latest verification, node03.nasdaqt.vip has been taken offline, though it previously posed an elevated risk of credential theft or financial fraud.

Technical indicators confirm the malicious nature of node03.nasdaqt.vip. The domain was flagged by 1 of 95 VirusTotal security vendors and appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. Registered through Gname.com Pte. Ltd. on March 22, 2026, it resolved to the IP address 151.243.130.175, hosted in the US under a private customer. The SSL certificate was issued by Let's Encrypt (R12), and the site employed HSTS technology. The observed page title was 'Nasdaq Trading Platform,' though no legitimate affiliation with Nasdaq exists. Nameservers were pat.ns.cloudflare.com and piers.ns.cloudflare.com, and Gridinsoft assigned a trust score of 0/100.

Users who interacted with node03.nasdaqt.vip should immediately change any exposed credentials, enable two-factor authentication, and monitor accounts for unauthorized activity. If financial or cryptocurrency details were entered, revoke any token approvals and consider transferring funds to a new wallet. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts.