makanexaa[.]com

This domain is flagged as a generic_phishing threat specializing in fraudulent Contract for Difference (CFD) trading schemes, as indicated by its page title and infrastructure analysis. The site, makanexaa.com, was designed to deceive users by impersonating legitimate trading platforms offering stocks, gold, oil, and indices trading. Despite its current offline status, the domain remains under investigation due to its confirmed malicious intent and historical activity. Analysis reveals multiple technical indicators supporting its classification as a phishing threat. The domain was registered on April 21, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk registrations. It resolves to the IP address 82.197.80.253, which has been linked to other suspicious domains in threat intelligence feeds. While VirusTotal reports 0/95 detections, the domain appears on two security blocklists (PhishDestroy and OISD) and was identified in one AlienVault OTX threat intelligence pulse. Trust scores from Gridinsoft and Scamadviser are critically low at 0/100 and 1/100, respectively, further corroborating its malicious nature. Mitigation steps for this specific threat type include immediate blocking of the domain and its associated IP address (82.197.80.253) at the network perimeter. Organizations should update endpoint protection rules to flag any attempts to access or resolve makanexaa.com, particularly in environments where financial or trading-related activities occur. Security teams are advised to monitor for credential harvesting patterns, as CFD phishing sites often deploy fake login portals to capture user credentials. User awareness training should emphasize the risks of interacting with unsolicited trading platforms, especially those promising high-return investments in commodities or indices. Historical logs should be reviewed for any prior connections to this domain or its IP to assess potential compromise.