mail[.]dronetradefx[.]com

PhishDestroy identifies mail.dronetradefx.com as a currently active generic phishing domain under investigation for credential harvesting operations. The domain mimics legitimate email services to deceive users into submitting login details, exposing them to financial and identity theft. Current evidence suggests this infrastructure is being staged for widespread phishing campaigns targeting unsuspecting internet users.

This domain resolves to IP 66.85.46.67 and operates with a valid Let’s Encrypt SSL certificate. VirusTotal currently lists 0 detections out of 95 security vendors, indicating low signature coverage and high evasion potential. Further investigation is required to determine the registrar and domain creation date; however, preliminary network analysis shows this IP has been associated with a growing number of low-trust domains. While blocklist data and trust scores remain unavailable at this stage, early indicators suggest this domain is part of a newly established threat cluster with potential for rapid expansion. The absence of detections increases the risk of delayed detection by security tools and end users alike.

The domain remains active and under active monitoring. Users are strongly advised to avoid accessing mail.dronetradefx.com or any associated subdomains. If encountered, report the domain to your email provider, security team, or national cybersecurity authority immediately using the domain name and IP address as indicators. Implement network-level blocking via DNS filtering or firewall rules targeting 66.85.46.67 to prevent accidental exposure. Enable multi-factor authentication (MFA) on all email accounts and remain vigilant for unexpected login prompts or suspicious email links. This domain should be treated as hostile until proven otherwise, and proactive threat hunting is recommended for organizations with strong phishing defense protocols.