brokerplusfx[.]xyz

Analysis of brokerplusfx.xyz shows a recently registered domain (creation date Feb 21 2026) that has been taken offline. DNS resolution points to IP 199.59.243.228, an address owned by Amazon.com, Inc. (AS16509) and located in the United States. The site presented a page title identical to the domain name, offering no additional context about the content or targeted brand. Trust‑rating services assign extremely low scores: Scamadviser reports 1 / 100 and Gridinsoft 0 / 100, indicating a high likelihood of malicious intent.

The domain is classified as a crypto scam, and eight of ninety‑three VirusTotal scanners flagged the host as malicious. An R12‑grade SSL certificate was observed, which does not mitigate the risk. The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy.

Current evidence confirms the presence of a crypto‑focused phishing infrastructure but provides no details on the payload, credential‑harvesting mechanisms, or victim interaction flow. Defenders should treat the host as hostile: block the IP address 199.59.243.228 and the fully qualified domain name, monitor for any new DNS records associated with the same ASN, and add the domain to internal URL filtering policies. Continuous observation of VirusTotal and other threat‑intel feeds is advised to capture any re‑activation or related campaigns.