fxcryptomat[.]com

Analysis as of July 24, 2026 indicates that fxcryptomat.com is currently offline but retains indicators of malicious activity. The domain was registered on 2 December 2024 through Hosting Concepts B.V. operating as Registrar.eu and is hosted on IP 176.123.0.199, which belongs to AS200019 ALEXHOST SRL located in Moldova. DNS resolution uses Alexhost name servers ns7.alexhost.com and ns8.alexhost.com. No TLS certificate is presented, meaning the site served only HTTP traffic.

The sole page title returned during the brief crawl was “Home”, providing no insight into the intended victim luring vector. VirusTotal scans show that four of ninety‑five AV engines flagged the domain, indicating that at least a minority of security products recognize it as malicious. Independent blocklist monitoring confirms inclusion on a single public blocklist, and the domain is listed by PhishDestroy as a phishing source. Reputation services assign extremely low trust scores (1/100) on both Scamadviser and Gridinsoft, reinforcing the assessment of high risk.

The limited visibility into page content leaves the specific phishing campaign undefined, and no evidence of a particular brand or credential‑stealing kit has been publicly disclosed. Defenders should block DNS resolution to 176.123.0.199, add fxcryptomat.com to URL filtering and email security policies, and monitor for any re‑activation of the domain. Continuous re‑scanning with multi‑engine services is advised to capture any future changes in payload or hosting. Incident response teams should treat any traffic to this domain as potentially malicious and investigate related logs for credential theft attempts.