999exbo[.]com

This domain, 999exbo.com, is actively engaged in brand impersonation targeting cryptocurrency investors. Analysis indicates the domain is designed to mimic a legitimate trading platform, specifically promoting itself as '999EX fast trade - Leading Cryptocurrency Trading Platform.' The domain is currently active and poses a high risk to users due to its fraudulent intent to deceive individuals into disclosing sensitive financial or personal information under false pretenses.

Infrastructure analysis reveals the domain was registered on January 9, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. It resolves to the IP address 115.179.103.125, which has no prior history of legitimate use in this context. As of the latest assessment, only 1 of 95 security vendors on VirusTotal has flagged the domain, suggesting limited detection at this stage. The domain employs a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the legitimacy of the site. No additional blocklist entries or trust scores were identified during the investigation, further indicating its low visibility in threat intelligence feeds.

The current status of 999exbo.com remains active, with no indications of takedown or mitigation efforts. Organizations and individuals are advised to block the domain at the network level and add it to endpoint protection rules. Users should be educated to recognize brand impersonation tactics, particularly in the cryptocurrency sector, where financial losses can occur rapidly. Monitoring for related domains registered under the same registrar or resolving to the same IP address is recommended to preemptively identify potential copycat threats. Immediate reporting to relevant financial and cybersecurity authorities is encouraged to facilitate broader mitigation efforts.