fxmarket24[.]com

This domain, fxmarket24.com, is identified as a brand impersonation threat targeting users through a fraudulent online trading platform. Analysis confirms the site mimics legitimate investment services, presenting itself under the title 'Fxmarket 24 – Best Online Trading Platform.' The threat type is classified as an investment scam, designed to deceive victims into depositing funds or disclosing sensitive financial information under false pretenses. No direct evidence of a crypto drainer kit or credential harvester was observed, though the infrastructure aligns with known fraudulent trading scheme patterns. Technical indicators reveal multiple red flags. The domain is flagged by 6 out of 95 security vendors on VirusTotal, with one confirmed blocklist entry. It was registered on April 03, 2025, through Ultahost, Inc., and resolves to the IP address 188.114.97.3. Detected technologies include WordPress, MySQL, PHP, and Cloudflare, suggesting a structured but low-effort deployment typical of scam operations. The Gridinsoft trust score of 0/100 further corroborates its malicious classification. No Google Safe Browsing (GSB) hits were recorded at the time of analysis, though this does not diminish the domain’s verified risk profile. As of the latest assessment, fxmarket24.com has been taken offline, likely due to enforcement actions or infrastructure disruption. The domain was blocked by PhishDestroy, indicating proactive mitigation efforts. Despite its current inactive status, residual risk persists for users who may have engaged with the site prior to takedown. Organizations and individuals are advised to monitor for unauthorized financial transactions, revoke any credentials shared with the domain, and implement additional authentication controls for affected accounts. Network-level blocking of the resolved IP (188.114.97.3) is recommended as a precautionary measure.