fxsdf[.]com

Analysis of fxsdf.com indicates a high-risk crypto scam domain targeting Instagram users, currently offline as of July 23, 2026. The domain was registered on October 27, 2025, through Tucows Domains Inc. and resolves to IP address 217.114.42.23, hosted by AS57724 (DDOS-GUARD LTD) in Russia. Infrastructure analysis reveals the use of nameservers ns1.ddos-guard.net and ns2.ddos-guard.net, a provider frequently associated with malicious activity. The domain lacks an SSL certificate, increasing the risk of data interception.

The page title, 'Phantom: The crypto wallet for everyone,' suggests an attempt to impersonate a legitimate crypto wallet service, though the exact content and mechanics of the scam remain unconfirmed. Google Safe Browsing flags the domain for social engineering, while Scamadviser assigns a trust score of 1 out of 100, indicating a high probability of fraudulent intent. AlienVault OTX lists the domain in 16 threat intelligence pulses, further corroborating its malicious classification. One security blocklist includes fxsdf.com, and PhishDestroy has blocked it.

While 15 of 95 security vendors on VirusTotal flagged the domain, the absence of additional context limits conclusions about specific detection rules. The domain’s current offline status may indicate takedown efforts or temporary suspension, but defenders should treat it as active until confirmed otherwise. Organizations are advised to block the domain, its resolved IP, and associated nameservers at the network level. Monitoring for re-registration or changes in hosting infrastructure is recommended, as threat actors frequently reuse such domains for future campaigns.