tradespherefx[.]top

This domain is flagged as an elevated-risk forex investment scam, designed to harvest financial credentials and investment deposits under the pretense of a legitimate trading platform. Analysis indicates the site employs social engineering tactics, including fabricated trading dashboards and false profit reports, to deceive victims into transferring funds or disclosing sensitive account details. Infrastructure analysis reveals tradespherefx.top was registered on April 28, 2026, through Global Domain Group LLC, an entity frequently associated with fraudulent domains. The domain resolves to IP address 37.49.229.75 and is currently offline. Security telemetry shows 5 out of 95 vendors on VirusTotal flagged the domain, while Scamadviser and Gridinsoft assigned trust scores of 1/100 and 15/100, respectively. The domain appears on one security blocklist and was previously blocked by PhishDestroy. Detected technologies include Bootstrap, LiteSpeed, Swiper, Modernizr, jQuery, HSTS, and HTTP/3, which may be leveraged to enhance credibility or evade detection. Mitigation requires immediate blocking of the domain and its resolving IP (37.49.229.75) at network perimeter controls. Security teams should deploy indicators of compromise (IOCs) across endpoint detection and response (EDR) systems, including the domain, IP, and associated SSL certificates. Financial institutions and payment processors are advised to monitor for transactions linked to this domain or its infrastructure. Users who interacted with the site should reset credentials for financial accounts, enable multi-factor authentication, and report the incident to relevant fraud authorities. Proactive threat hunting should focus on related domains registered through Global Domain Group LLC or resolving to the same IP range.