posodex[.]com

This domain, posodex.com, is identified as a phishing site designed to impersonate TON, a legitimate cryptocurrency platform. The site falsely presents itself as a trading and investment service under the name POSODEX, targeting users seeking cryptocurrency opportunities. Visitors may be tricked into entering sensitive credentials, such as wallet keys or personal information, which could lead to unauthorized access to digital assets or financial loss. The domain’s deceptive design and branding closely mimic authentic TON services, increasing the likelihood of successful social engineering attacks against unsuspecting users. Analysis indicates that posodex.com was registered on August 23, 2025, through Web Commerce Communications Limited, a registrar commonly associated with newly created domains used for malicious purposes. The domain resolves to the IP address 172.67.208.126, hosted on infrastructure belonging to Cloudflare, Inc. (AS13335), a service frequently leveraged to obscure the true origin of phishing sites. Security vendors on VirusTotal have flagged this domain, with 10 out of 95 engines detecting it as malicious. Additionally, the domain appears on one security blocklist and lacks a valid SSL certificate, further signaling its illegitimate nature. The combination of these technical indicators—recent registration, absence of encryption, and low detection rates—suggests an actively maintained phishing operation. Users who visited posodex.com should take immediate action to mitigate potential risks. If any credentials or wallet information were entered on the site, affected individuals should transfer remaining assets to a new, secure wallet and revoke access to any compromised accounts. Enable multi-factor authentication on all cryptocurrency-related platforms and monitor accounts for unauthorized transactions. It is also recommended to scan local devices for malware, as phishing sites may distribute additional payloads. Report the domain to relevant security teams or cryptocurrency abuse platforms to assist in broader takedown efforts. Given the domain’s current offline status, users should remain vigilant for similar phishing attempts targeting TON or other cryptocurrency services.