blockvertexfx[.]com

Analysis indicates that blockvertexfx.com is an active phishing domain targeting forex trading platforms, first registered on February 14, 2025, through registrar ENOM, INC. The domain resolves to IP address 104.37.190.58 and utilizes nameservers vda3800a.trouble-free.net and vda3800b.trouble-free.net, suggesting a hosting arrangement with Trouble-Free Enterprises. As of July 27, 2026, the site remains operational and has been flagged by at least one security blocklist, specifically PhishDestroy. VirusTotal reports that 2 out of 91 security vendors detect this domain as malicious, providing additional confirmation of its phishing classification.

Infrastructure analysis reveals no SSL certificate details or HTTP status codes in the available data, limiting assessment of encryption or server behavior. The domain's registration age—over 17 months—does not align with typical short-lived phishing campaigns, though prolonged activity is not unprecedented for credential-harvesting sites. No brand-specific indicators, such as page titles or targeted logos, are present in the current intelligence, restricting further attribution.

Defenders should treat this domain as high-risk and implement blocking at the DNS or network level. SOC teams are advised to monitor for connections to 104.37.190.58 and correlate with existing phishing indicators. Given the domain's persistence and detection by multiple vendors, assume it remains a viable threat until decommissioned or further evidence emerges.