100xtrade[.]pro

The domain 100xtrade.pro has been identified as a brand impersonation threat targeting Chase, a major financial institution. Analysis confirms the domain is designed to deceive users by masquerading as a legitimate trading platform, specifically promoting forex, stocks, ETFs, and options trading under the fabricated title '100XTRADE | Forex, Stocks, ETFs & Options Trading.' The domain is currently offline, but prior activity indicates a high-risk phishing operation intended to harvest sensitive financial credentials or distribute malicious payloads. Technical indicators reveal multiple red flags. The domain is flagged by 4 of 95 security vendors on VirusTotal, indicating malicious intent. It appears on one security blocklist and is associated with a Gridinsoft trust score of 1/100 and a Scamadviser trust score of 1/100, both signaling extreme unreliability. Infrastructure analysis shows the domain resolves to the IP address 198.23.193.170, registered through CC-198-23-193-168-29 (ASN: 36352). AlienVault OTX records the domain in one threat intelligence pulse, further corroborating its malicious classification. Detected technologies include LiteSpeed and HTTP/3, which may have been exploited to evade detection or enhance phishing page performance. Current status confirms the domain has been taken offline, likely due to enforcement actions or infrastructure takedowns. However, the risk of reemergence under a similar or altered domain remains elevated. Organizations and users are advised to block the domain and its associated IP (198.23.193.170) at the network perimeter. Financial institutions, particularly Chase, should monitor for similar impersonation attempts and educate customers on recognizing phishing indicators. Security teams are recommended to review logs for prior connections to 100xtrade.pro and investigate potential credential exposure or unauthorized access attempts linked to this campaign.