optionsmxtrd[.]com[.]trdingpitfs[.]com

optionsmxtrd.com.trdingpitfs.com is currently offline but historical data indicate it was used to present a fraudulent cryptocurrency trading service. The site’s page title, “Optionsmaxtrade – Crypto trading with a reliable broker,” explicitly positions the domain as a fake broker aimed at luring investors. DNS resolution points to the IPv4 address 213.165.249.109, which resolves to a server in the Netherlands owned to AS22611 InMotion Hosting, Inc. The domain was registered on 21 February 2026, suggesting a short‑lived campaign that aligns with typical financial‑fraud operations. The SSL certificate associated with the host is rated R10, a low trust score that further signals suspicious activity.

Independent telemetry shows the domain listed on a single security blocklist and flagged by the PhishDestroy mitigation service. VirusTotal analysis recorded detections from two of ninety‑three scanning engines, confirming at least limited malicious classification. No additional public intelligence such as OTX indicators, Safe Browsing verdicts, or detailed kit fingerprints were observed.

Because the site is presently taken offline, active exploitation cannot be confirmed, but the existing infrastructure artifacts remain actionable. Defenders should continue to block the domain and its resolving IP address at perimeter and DNS filters, add the host to internal threat‑intel feeds, and monitor InMotion Hosting for related activity. Ongoing observation of new registrations that reuse the same naming pattern or target the same IP range is advised to catch potential re‑deployment of the campaign.