fx[.]omegaprofx[.]com

Analysis of fx.omegaprofx.com confirms its classification as an active social media phishing domain, specifically targeting foreign exchange (FX) traders. The domain, registered on February 21, 2026, resolves to IP address 173.0.59.2, hosted on AS27323 (Wowrack.com) in the United States. Infrastructure analysis reveals the use of nameservers dns10.parkpage.foundationapi.com and dns11.parkpage.foundationapi.com, a pattern observed in other recently reported phishing campaigns. The domain is currently flagged by one security blocklist and has been detected by 6 of 93 security vendors on VirusTotal, indicating moderate but growing detection coverage. The page title 'Omega Pro FX' suggests an attempt to impersonate a legitimate FX trading platform or service, though the exact content and targeted brand remain unconfirmed due to the absence of deeper forensic analysis. The domain employs a Let's Encrypt SSL certificate (YE1), which provides HTTPS encryption but does not validate legitimacy. A 302 HTTP redirect is present, a common technique used to obscure the final destination or evade automated crawlers. The domain's trust score is 0/100, reinforcing its high-risk classification. Defenders should treat this domain as an active threat. Recommended actions include blocking the domain and its resolving IP at the network perimeter, monitoring for connections to the associated IP and nameservers, and alerting users to the social media phishing risk. Given the domain's recent registration and limited detection coverage, further monitoring of related infrastructure is advised to identify potential campaign expansion or shifts in tactics.