persianfxminer[.]com

persianfxminer.com is currently flagged as a high‑risk generic phishing domain. The domain resolves to the IPv4 address 216.158.227.108 and is served by nameservers vda2000a.trouble‑free.net and vda2000b.trouble‑free.net, both hosted under the trouble‑free.net zone. Registration data shows the domain was created on 29 February 2024 through Tucows Domains Inc., and no further modifications have been observed since its creation. VirusTotal has recorded detections from three of ninety‑one security vendors, indicating that at least a small subset of scanners recognize malicious behavior.

The domain appears on a single external security blocklist and is explicitly blocked by the PhishDestroy feed, confirming its inclusion in active threat intelligence sources. No public SSL certificate information or HTTP response codes have been published, and the site’s page title and content have not been captured in the available intelligence, leaving the exact phishing lures employed unknown. Infrastructure analysis reveals that the hosting IP 216.158.227.108 is currently active and may be shared with other malicious resources, but no additional attribution such as ASN or country has been disclosed.

Defenders should add persianfxminer.com to DNS‑based blocklists, enforce network‑level filtering of the associated IP address, and monitor for any outbound connections to the domain. Continuous re‑scanning with multi‑vendor services is advised to capture any changes in detection rates. Because the domain is still active, organizations are encouraged to treat any traffic to persianfxminer.com as hostile and to log related events for further investigation.