exprimetrade[.]com

The domain exprimetrade.com was registered on 27 June 2026 through TuringSign Inc. d/b/a Cosmotown. DNS resolution points to the IPv4 address 193.108.130.21 and the authoritative name servers are ns5.private-nameserver.net and ns6.private-nameserver.net. The domain is currently active and has been observed on a single security blocklist; the blocklist entry is enforced by the PhishDestroy service. VirusTotal has processed the domain with scans from 91 antivirus and URL‑reputation engines; at the time of analysis none of the engines reported a detection.

The absence of detections does not constitute a safety assurance, and the domain remains classified as a generic phishing infrastructure. Infrastructure analysis indicates that the hosting IP is not associated with a well‑known cloud provider, and no ASN or country attribution is supplied in the available data. The use of private‑nameserver.net name servers is consistent with recent trends observed in phishing campaigns that employ disposable DNS services to reduce attribution. Because the domain is newly created and only a single blocklist entry is known, the broader detection surface is limited.

Defenders should consider adding the domain to local deny lists, monitoring DNS queries for lookups to 193.108.130.21, and enforcing URL filtering rules that reference the PhishDestroy blocklist. Continuous re‑scanning on VirusTotal or similar multi‑engine platforms is recommended to capture any future classification changes. Uncertainty remains regarding the content hosted on the domain, the presence of SSL/TLS certificates, HTTP response codes, and any specific brand impersonation. Until such telemetry is available, the domain should be treated as a potential phishing vector, and any inbound traffic should be inspected with appropriate security controls.