activetradesexchange[.]net

On 2 January 2026 the domain activetradesexchange.net was registered through the registrar TUCOWS.COM, CO. The domain is still active as of the report date 27 July 2026 and is classified as a generic phishing operation. Infrastructure analysis reveals that the domain resolves to the IPv4 address 45.58.159.54 and is served by the authoritative name servers ns1.site4now.net, ns2.site4now.net, and ns3.site4now.net. The IP address is listed on a single security blocklist; the entry is maintained by PhishDestroy, indicating that at least one security‑focused organization has identified the host as malicious.

VirusTotal scanning shows that one of ninety‑one security vendors flagged the domain, providing a minimal but non‑zero detection signal. No additional public detections, safe‑browsing warnings, or Open Threat Exchange (OTX) references are currently available. Likewise, information on SSL/TLS configuration, HTTP response codes, page title, or targeted brand has not been disclosed, leaving the exact phishing content uncertain.

Given the recent registration (approximately six months old), the active status, and the presence on a blocklist, defenders should treat activetradesexchange.net as high‑risk. Recommended mitigations include adding the domain and its resolved IP address to outbound URL filtering and firewall deny lists, monitoring DNS queries for the associated site4now.net name servers, and ensuring that email security gateways block messages containing the domain. Organizations should also feed the indicator into internal threat‑intel platforms and periodically reassess the indicator as additional scanners or blocklists may surface further detections.