coinenergytrade[.]com

coinenergytrade.com was registered on 21 February 2026 and is presently taken offline. DNS resolution points to the IPv4 address 107.173.193.235, which belongs to the HostPapa hosting provider (AS36352) located in the United States. The site presents an SSL certificate identified with an R10 rating, confirming the use of TLS but offering no indication of certificate legitimacy. When accessed, the HTTP response includes the page title “SwiftFX Crypto | Forex | Stock | Commodities Investments”, a phrase that aligns with the listed scam type of a crypto‑related investment fraud.

VirusTotal analysis shows that three of ninety‑three scanning engines flagged the domain as malicious, providing independent confirmation of its abusive intent. The domain is listed on the PhishDestroy blocklist and appears on one additional security blocklist, demonstrating that multiple threat‑intelligence feeds have categorized it as hostile. No public Safe Browsing, Open Threat Exchange, registrar reputation, or broader trust‑score data are currently available. The collected evidence suggests a brand‑impersonation campaign that likely exploits the “SwiftFX” branding to attract victims to cryptocurrency or investment schemes.

Because the site is offline, the exact content, credential‑harvesting mechanisms, or redirection tactics cannot be examined, leaving the full attack workflow uncertain. Defensive recommendations include: continue to block the IP address 107.173.193.235 at network perimeters; enforce DNS filtering for coinenergytrade.com and any future subdomains; monitor for re‑registration or resurrection of the domain; and share the indicator set with upstream threat‑intel platforms. Organizations should also consider notifying any brand potentially targeted by the impersonation for coordinated response.