The domain fxdollartradings.com was registered on June 16, 2026 through TuringSign Inc. d/b/a Cosmotown. It resolves to IP 64.20.40.243. Nameservers vda8300a.trouble-free.net and vda8300b.trouble-free.net. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL.
VirusTotal scans returned five positive detections out of ninety‑one vendors, indicating consensus among multiple scanners that the domain is malicious. No public SSL certificate information or HTTP response codes are currently available, and no page title has been disclosed, so the exact content served by the site cannot be verified. The lack of additional telemetry such as Safe Browsing or OTX references suggests that the domain has not yet been widely reported beyond the initial blocklist entries. The observed infrastructure—recent registration, use of generic trouble‑free.net nameservers, and association with known phishing‑blocking products—matches typical patterns for short‑lived phishing infrastructure.
Defenders should add the domain and its IP address to outbound and inbound blocklists, monitor DNS queries for the nameservers, and consider sinkholing the IP if feasible. Continuous re‑scanning with VirusTotal or similar multi‑engine services is recommended to capture any emerging detections. Organizations that handle foreign exchange or retail trading communications should alert users to the presence of this domain and advise against any credential submission. Until further content analysis is performed, the domain should be treated as high‑confidence malicious and mitigated accordingly.