bexotrades[.]com

The domain bexotrades.com has been identified as part of a generic phishing operation. Registration records indicate the domain was created on February 21, 2026. DNS resolution points to the IPv4 address 198.251.84.200, which is hosted in Luxembourg and associated with the organization FranTech Solutions.

Current monitoring shows the domain is taken offline, but historical activity remains relevant for threat intelligence. A VirusTotal assessment recorded a single positive detection out of ninety‑five security vendors, confirming at least one vendor has flagged the domain as malicious. The domain also appears on a single external blocklist and is specifically blocked by the PhishDestroy service, reinforcing its classification as a phishing source.

No additional data such as SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts are available in the current intelligence set. Consequently, the confidence in the malicious nature of the domain rests on the registration age, hosting attribution, the single vendor flag, and blocklist inclusion. Defenders should ensure that bexotrades.com and its resolving IP 198.251.84.200 are added to deny lists across perimeter and endpoint controls, monitor for any re‑registration attempts, and continue to track related indicators that may emerge from the same hosting provider or registrar.