bullfxtrade[.]com[.]crowntrustcapital[.]com

This domain, bullfxtrade.com.crowntrustcapital.com, was registered on 2026-01-06 through Tucows Domains Inc. and is presently resolved to the IPv4 address 104.37.190.203. The authoritative name servers are dns2012a.trouble-free.net and dns2012b.trouble-free.net, both of which are associated with a free DNS service. The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy sinkhole, indicating that at least one security‑operational entity has observed malicious activity originating from it.

VirusTotal analysis shows that 2 out of 91 scanning engines flagged the domain, reinforcing the suspicion of abuse. The site is still active as of the report date (2026-07-27). No additional public intelligence such as Safe Browsing verdicts, OTX references, SSL certificate details, HTTP response codes, or page title information is currently available, leaving the full scope of the phishing campaign undefined.

Defenders should add the domain and its resolving IP address to network‑level deny lists, monitor DNS queries for the associated name‑servers, and ensure that any outbound connections to 104.37.190.203 are logged and inspected. Because the domain is newly created and already exhibits blocklist presence, it is advisable to treat any email or web traffic referencing the domain as high‑risk, enforce strict URL filtering, and consider sharing the indicator set with upstream threat‑sharing communities. Continuous re‑evaluation is recommended as further telemetry becomes available.