financestrategytrade[.]com

Analysis of financestrategytrade.com shows a concrete footprint that aligns with a generic phishing operation. The domain was registered on February 23, 2026 through Cosmotown, Inc., and it resolves to the IPv4 address 91.230.49.19, which belongs to AS62068 SpectraIP B.V. in the Netherlands. The hosting infrastructure serves content over HTTP/3 and includes client‑side libraries jQuery and CreateJS, but no TLS certificate is present, indicating the site was operating without encryption.

The page title observed during scanning – "Finance Strategy – Safe investment with Finance Strategy" – suggests an investment‑oriented lure, though the actual page content has not been captured. Security telemetry records the domain on three independent blocklists and notes that it has been blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans report two detections out of ninety‑three AV engines, reinforcing the malicious classification.

The domain’s authoritative nameservers are ns100.mypowerfulserver.com and ns200.mypowerfulserver.com, both of which are commonly associated with disposable hosting used in phishing campaigns. Gridinsoft assigns a trust score of 0 / 100, underscoring the lack of credibility. As of the report date, the site is taken offline, limiting immediate observation, but the historical evidence warrants continued monitoring of the IP address and associated nameservers, inclusion on corporate URL filtering lists, and proactive alerts for any re‑appearance of the domain or related infrastructure.