360metafxtrades[.]live

On 27 July 2026, analyst review confirms that the domain 360metafxtrades.live is being used for a high‑risk generic phishing campaign. The domain was registered through Dynadot Inc on 06 April 2026 and remains active. DNS resolution points to the IPv4 address 50.6.200.60, and the authoritative name servers are ns1.360metafxtrades.live and ns2.360metafxtrades.live. Reputation checks show the domain appears on one security blocklist and is listed by PhishDestroy as blocked.

VirusTotal has recorded detections from 2 of 91 scanned security vendors, indicating that at least a minority of scanners have identified malicious behavior. No additional public reputation sources such as Google Safe Browsing, OTX, or SSL/TLS analysis have been published for this host, and the HTTP response code and page title have not been captured in the current intelligence set. The limited detection footprint, combined with the presence on a blocklist and the active status, suggests the infrastructure is deliberately maintained for phishing operations.

Defenders should block outbound connections to 50.6.200.60, add 360metafxtrades.live to DNS blocklists, and monitor any traffic to the domain’s name servers. Continuous re‑scanning with multi‑vendor services is recommended to capture any future changes in detection rates. Organizations using email filters or web gateways should ensure the domain is explicitly denied, and incident response teams should treat any credential submissions to this host as compromised.