xstartrade[.]com

The domain xstartrade.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently resolved to the IPv4 address 91.230.49.19, which belongs to AS62068 SpectraIP B.V. in the Netherlands. The site presents an HTTP 200 response and serves a valid Let’s Encrypt certificate (YR2), indicating that TLS negotiation completes without error. DNS resolution uses the authoritative name servers ns100.mypowerfulserver.com and ns200.mypowerfulserver.com, and the MX record points to xstartrade.com with priority 0, suggesting the domain also hosts mail services. Automated analysis platforms have identified the site as malicious: PhishDestroy has actively blocked the domain, and VirusTotal reports that two of ninety‑three scanned security vendors flagged the host.

The Gridinsoft trust score is 0 out of 100, and the domain appears on one external security blocklist. AlienVault OTX includes the host in a single threat‑intelligence pulse, reinforcing its association with malicious activity. A technical fingerprint of the front‑end reveals the use of common web‑stack components such as Bootstrap, Vue.js, Select2, OWL Carousel, Modernizr, jQuery, Google Analytics, and Font Awesome, which are often employed by low‑cost phishing kits to expedite deployment.

No additional branding or target information is present in the available page title, which reads “XstarTrade | Home.” Defenders should prioritize immediate blocking of both the domain and its resolving IP address at perimeter and endpoint controls. Continuous monitoring of the associated name servers and MX record is advised, as changes may indicate further malicious infrastructure expansion. Given the low trust score and existing blocklist entries, adding the host to internal blacklists and sharing the indicators of compromise (IoC) with threat‑share platforms will help mitigate downstream exploitation.