satrixbroker[.]xyz

The domain satrixbroker.xyz was registered on 02 November 2024 through OwnRegistrar, Inc. and is currently hosted on IP address 192.3.190.186, which belongs to AS36352 HostPapa in the United States. The authoritative nameservers listed are dns1.webproserver.com and dns2.webproserver.com, with a null entry observed. No TLS certificate is presented, indicating that the site is served only over HTTP. VirusTotal reports that nine of ninety‑five scanning engines flag the domain as malicious, and the domain appears on a single public security blocklist.

PhishDestroy has also listed the domain as blocked. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. The page title returned from the HTTP response is “Satrix Broker - Home,” and the campaign is classified as a crypto‑scam that impersonates the Ethereum brand. At the time of analysis the service was taken offline, so content cannot be inspected directly.

Evidence gaps include the lack of a visible SSL certificate, limited visibility into the page’s HTML or any credential‑harvesting forms, and the absence of additional threat‑intel references such as OTX or Safe Browsing entries. Defenders should continue to block the domain and its associated IP address, add the nameservers to network‑level deny lists, and monitor for any re‑hosting of the same infrastructure. Users should be warned that any unsolicited communications referencing Ethereum or cryptocurrency transactions that reference satrixbroker.xyz are likely fraudulent. Ongoing surveillance of the registrar and hosting provider is advised to detect potential repurposing of the domain or related subdomains.