fxvoltprimes[.]site

The domain fxvoltprimes.site was observed on July 12, 2026 delivering a generic phishing campaign. The site returns HTTP 200 and displays the page title "fxvoltprime - Home", suggesting an attempt to impersonate a legitimate service. The domain was created on May 19, 2026 and is currently classified as high‑risk.

The authoritative name servers are dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com, all resolving to the host address 163.61.188.2 located in the United States. The domain presents a valid TLS certificate from Let's Encrypt issued under the R13 policy, which provides encryption but does not mitigate the malicious intent. Mail exchange records consist solely of an MX entry pointing back to fxvoltprimes.site, a pattern commonly observed in phishing infrastructure.

Multiple security observables corroborate the malicious classification. PhishDestroy has blocked the domain, and it appears on a single external blocklist. AlienVault OTX references the domain in one threat‑intelligence pulse. On VirusTotal, one out of ninety‑five scanners flagged the domain, and Gridinsoft assigns a trust score of 37 out of 100, both indicating a low confidence in legitimacy. Registration was performed through Global Domain Group LLC, a registrar frequently associated with transient malicious registrations.

Defenders should treat any traffic to fxvoltprimes.site as hostile. Email filters ought to block messages that reference the domain or embed its URL. Network security devices should deny outbound connections to the resolved IP address 163.61.188.2. Continuous monitoring for related sub‑domains or newly registered domains using the same name‑server set is advised, as adversaries often recycle this infrastructure for subsequent campaigns.