farosonglobaltrade[.]ltd

Analysis of farosonglobaltrade.ltd indicates that the domain was created on January 12, 2026 and is currently resolving to the IPv4 address 5.182.208.206. The authoritative name servers are ns1.zencorehost.com and ns2.zencorehost.com, and registration was performed through Unstoppable Domains Inc. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy platform, confirming that defensive tooling recognizes it as malicious. VirusTotal records show that four out of ninety‑one scanned security vendors have flagged the domain, providing additional independent confirmation of its threat status.

No public information is available regarding SSL certificate details, HTTP response codes, Safe Browsing status, or any page‑title metadata, leaving those aspects of the site’s behavior unverified. The limited detection footprint—four vendor flags and one blocklist entry—suggests that the malicious infrastructure may be in early deployment or that broader telemetry has not yet captured its activity. Defenders should prioritize adding farosonglobaltrade.ltd to deny‑list rules across network perimeter devices, DNS resolvers, and endpoint protection suites.

Continuous monitoring of DNS queries for the domain and its associated IP address is advisable, as well as periodic re‑evaluation of its reputation on VirusTotal and other threat‑intel platforms to detect any escalation in detection counts. Given the registration through a known cryptocurrency‑friendly registrar and the active blocking by PhishDestroy, the domain should be treated as high‑risk until further evidence indicates remediation.