exchangemarket247[.]com

Analysis of exchangemarket247.com indicates a high-risk fake trading exchange phishing domain active as of July 24, 2026. The domain was registered on June 20, 2025, through GMO Internet Group, Inc. d/b/a Onamae.com, and resolves to IP address 162.245.237.212, hosted by CENTRIOHOST-LLC in the United States. Infrastructure analysis reveals the use of nameservers dns1.webproserver.com and dns2.webproserver.com, with an SSL certificate issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. The domain is flagged by 9 of 91 security vendors on VirusTotal, though this does not confirm all detections are for phishing.

It appears on one security blocklist (PhishDestroy) and is recorded in three AlienVault OTX threat intelligence pulses, reinforcing its classification as malicious. Gridinsoft assigns a trust score of 0/100, further supporting the assessment of high risk. The page title, '247Exchange Market View | Access a Wealth of Trading Opportunities,' aligns with the reported scam type of a fake exchange, though the exact content and functionality of the site remain unconfirmed. Technologies detected include Bootstrap, LiteSpeed, SweetAlert2, Smartsupp, jsDelivr, and GetButton, with HTTP/3 support.

The site returns an HTTP 302 redirect status, which may indicate an attempt to obscure its true destination or evade detection. While the domain's infrastructure and detection history strongly suggest malicious intent, defenders should verify the redirect target and monitor for additional indicators of compromise. Blocking the domain at the DNS or network level is recommended, alongside alerting users to the risk of fake trading platforms. No legitimate association with known financial or trading services has been established.