winningtradingtestimony[.]xyz

The domain winningtradingtestimony.xyz was registered through OwnRegistrar, Inc. on 14 November 2024. The site is listed on a single security blocklist and is actively blocked by the PhishDestroy service. Infrastructure analysis shows the domain resolves to the IPv4 address 192.3.190.186, which belongs to AS36352 hosted by HostPapa in the United States. Both authoritative name servers are dns1.webproserver.com and dns2.webproserver.com, with a third entry of “null” observed.

No TLS certificate is presented, indicating the site operates only over HTTP. The page title returned from the live endpoint before takedown reads “Winning Trading Testimony | Reliable and Profitable Investment in Binary Options, Forex, Indices, CFD's”, matching the classification of a Fake Exchange scam. The Gridinsoft trust score of 0 out of 100 further reflects a lack of legitimacy. VirusTotal reports that 2 of 95 scanning engines flagged the domain, confirming malicious intent despite the low detection count.

The domain is currently offline, but historical evidence of brand impersonation targeting “across” suggests the operators may reuse the same infrastructure for similar campaigns. Defenders should continue to block the domain and associated IP address, ingest the observed name server records into threat‑intel feeds, and monitor HostPapa‑hosted networks for repeat activity. Ongoing vigilance is advised because the low trust score and partial vendor detections indicate the potential for rapid re‑deployment under a different domain or sub‑domain.